suse/kernel-syms&distro=SUSE Linux Enterprise Server 12 SP5-LTSS

Vulnerabilities (1,878)

• CVE-2023-53265HigSep 16, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: ubi: ensure that VID header offset + VID header size <= alloc, size Ensure that the VID header offset + VID header size does not exceed the allocated area to avoid slab OOB. BUG: KASAN: slab-out-of-bounds in c

• CVE-2023-53254HigSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels The cacheinfo sets up the shared_cpu_map by checking whether the caches with the same index are shared between CPUs. However, this will

• CVE-2023-53250MedSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle KASAN reported a null-ptr-deref error: KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] CPU: 0 PID: 1373 Comm: modprob

• CVE-2023-53248MedSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: install stub fence into potential unused fence pointers When using cpu to update page tables, vm update fences are unused. Install stub fence into these fence pointers instead of NULL to avoid NULL

• CVE-2023-53246MedSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL When compiled with CONFIG_CIFS_DFS_UPCALL disabled, cifs_dfs_d_automount is NULL. cifs.ko logic for mapping CIFS_FATTR_DFS_REFERRAL attributes to S_AU

• CVE-2023-53245MedSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/O to the vFC device

• CVE-2023-53229HigSep 15, 2025
  affected < 4.12.14-122.283.1fixed 4.12.14-122.283.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta Avoid potential data corruption issues caused by uninitialized driver private data structures.

• CVE-2023-53226HigSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix OOB and integer underflow when rx packets Make sure mwifiex_process_mgmt_packet, mwifiex_process_sta_rx_packet and mwifiex_process_uap_rx_packet, mwifiex_uap_queue_bridged_pkt and mwifiex_pro

• CVE-2023-53215HigSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: sched/fair: Don't balance task to its current running CPU We've run into the case that the balancer tries to balance a migration disabled task and trigger the warning in set_task_cpu() like below: -----------

• CVE-2023-53213HigSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() Fix a slab-out-of-bounds read that occurs in kmemdup() called from brcmf_get_assoc_ies(). The bug could occur when assoc_info->req_len, data from

• CVE-2023-53204MedSep 15, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data-races around user->unix_inflight. user->unix_inflight is changed under spin_lock(unix_gc_lock), but too_many_unix_fds() reads it locklessly. Let's annotate the write/read accesses to user->un

• CVE-2023-53201MedSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: wraparound mbox producer index Driver is not handling the wraparound of the mbox producer index correctly. Currently the wraparound happens once u32 max is reached. Bit 31 of the producer index r

• CVE-2023-53199MedSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails Syzkaller detected a memory leak of skbs in ath9k_hif_usb_rx_stream(). While processing skbs in ath9k_hif_usb_rx_stream(), the already allo

• CVE-2022-50330HigSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: cavium - prevent integer overflow loading firmware The "code_length" value comes from the firmware file. If your firmware is untrusted realistically there is probably very little you can do to protect

• CVE-2022-50327MedSep 15, 2025
  affected < 4.12.14-122.280.1fixed 4.12.14-122.280.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value The return value of acpi_fetch_acpi_dev() could be NULL, which would cause a NULL pointer dereference to occur in acpi_device_hid(). [ rjw: Subje

• CVE-2022-50321MedSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb in case of pskb_expand_head() fails, add dev_kfree_skb() to fix it.

• CVE-2022-50312MedSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: drivers: serial: jsm: fix some leaks in probe This error path needs to unwind instead of just returning directly.

• CVE-2022-50311MedSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: cxl: Fix refcount leak in cxl_calc_capp_routing of_get_next_parent() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. This function only calls of_node_p

• CVE-2022-50304MedSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: mtd: core: fix possible resource leak in init_mtd() I got the error report while inject fault in init_mtd(): sysfs: cannot create duplicate filename '/devices/virtual/bdi/mtd-0' Call Trace: dump_stack

• CVE-2022-50299MedSep 15, 2025
  affected < 4.12.14-122.275.1fixed 4.12.14-122.275.1

  In the Linux kernel, the following vulnerability has been resolved: md: Replace snprintf with scnprintf Current code produces a warning as shown below when total characters in the constituent block device names plus the slashes exceeds 200. snprintf() returns the number of char