suse/kernel-syms&distro=SUSE Linux Enterprise Server 12 SP5-LTSS

Vulnerabilities (1,878)

• CVE-2024-49920MedOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before multiple uses [WHAT & HOW] Poniters, such as stream_enc and dc->bw_vbios, are null checked previously in the same function, so Coverity warns "implies that stream_enc

• CVE-2024-49901MedOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs There are some cases, such as the one uncovered by Commit 46d4efcccc68 ("drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails") wh

• CVE-2024-49896MedOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check stream before comparing them [WHAT & HOW] amdgpu_dm can pass a null stream to dc_is_stream_unchanged. It is necessary to check for null before dereferencing them. This fixes 1 FORWARD_NU

• CVE-2024-49894HigOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out of bounds issue in `cm_helper_translate_curve_to_degamma_hw_format` function. The issue could occur when the index

• CVE-2024-49891MedOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths When the HBA is undergoing a reset or is handling an errata event, NULL ptr dereference crashes may occur in routines such as lpfc_s

• CVE-2024-49890MedOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: ensure the fw_info is not null before using it This resolves the dereference null return value warning reported by Coverity.

• CVE-2024-49884HigOct 21, 2024
  affected < 4.12.14-122.237.1fixed 4.12.14-122.237.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following use-after-free: ================================================================== BUG: KASAN: slab-use-after-free in ext4_split_ext

• CVE-2024-49883HigOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4_ext_insert_extent() As Ojaswin mentioned in Link, in ext4_ext_insert_extent(), if the path is reallocated in ext4_ext_create_new_leaf(), we'll use the stale path and cause UAF

• CVE-2024-49882HigOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents path In ext4_ext_try_to_merge_up(), set path[1].p_bh to NULL after it has been released, otherwise it may be released twice. An example of what triggers this

• CVE-2024-49881MedOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: update orig_path in ext4_find_extent() In ext4_find_extent(), if the path is not big enough, we free it and set *orig_path to NULL. But after reallocating and successfully initializing the path, we don't

• CVE-2024-49877MedOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate When doing cleanup, if flags without OCFS2_BH_READAHEAD, it may trigger NULL pointer dereference in the following ocfs2_set_buffer_uptodate() if b

• CVE-2024-49868MedOct 21, 2024
  affected < 4.12.14-122.237.1fixed 4.12.14-122.237.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion [BUG] Syzbot reported a NULL pointer dereference with the following crash: FAULT_INJECTION: forcing a failure. start_transactio

• CVE-2024-49867HigOct 21, 2024
  affected < 4.12.14-122.250.1fixed 4.12.14-122.250.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmount, at close_ctree(), we have the following steps in this order: 1) Park the cleaner kthread - this doesn't destroy the k

• CVE-2024-49861HigOct 21, 2024
  affected < 4.12.14-122.269.1fixed 4.12.14-122.269.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix helper writes to read-only maps Lonial found an issue that despite user- and BPF-side frozen BPF map (like in case of .rodata), it was still possible to write into it from a BPF program side through sp

• CVE-2024-49860HigOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return values of _STR. If something else is returned description_show() will access invalid memory.

• CVE-2024-49858MedOct 21, 2024
  affected < 4.12.14-122.237.1fixed 4.12.14-122.237.1

  In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux specific construct, where the data produced by the GetEventLog() boot service is cached in memory, and p

• CVE-2024-49851MedOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure tpm_dev_transmit prepares the TPM space before attempting command transmission. However if the command fails no rollback of this preparation is done. This can resul

• CVE-2024-47749HigOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookup_atid The lookup_atid() function can return NULL if the ATID is invalid or does not exist in the identifier table, which could lead to dereferencing a null pointer without

• CVE-2024-47745HigOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called person

• CVE-2024-47742HigOct 21, 2024
  affected < 4.12.14-122.234.1fixed 4.12.14-122.234.1

  In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, th