suse/kernel-syms&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5

Vulnerabilities (1,486)

• CVE-2024-26958HigMay 1, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: nfs: fix UAF in direct writes In production we have been hitting the following warning consistently ------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 17 PID: 1800359 at

• CVE-2024-26934HigMay 1, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usb_deauthorize_interface() Among the attribute file callback routines in drivers/usb/core/sysfs.c, the interface_authorized_store() function is the only one which acquires a device l

• CVE-2024-27019May 1, 2024
  affected < 4.12.14-122.225.1fixed 4.12.14-122.225.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() nft_unregister_obj() can concurrent with __nft_obj_type_get(), and there is not any protection when iterate over nf_tables_objects list in _

• CVE-2024-27014May 1, 2024
  affected < 4.12.14-122.216.1fixed 4.12.14-122.216.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent deadlock while disabling aRFS When disabling aRFS under the `priv->state_lock`, any scheduled aRFS works are canceled using the `cancel_work_sync` function, which waits for the work to end if

• CVE-2024-27011May 1, 2024
  affected < 4.12.14-122.228.1fixed 4.12.14-122.228.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak in map from abort path The delete set command does not rely on the transaction object for element removal, therefore, a combination of delete element + delete set from the abor

• CVE-2024-27008May 1, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: drm: nv04: Fix out of bounds access When Output Resource (dcb->or) value is assigned in fabricate_dcb_output(), there may be out of bounds access to dac_users array in case dcb->or is zero because ffs(dcb->or)

• CVE-2024-26996May 1, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error When ncm function is working and then stop usb0 interface for link down, eth_stop() is called. At this piont, accidentally if usb t

• CVE-2024-26984May 1, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: nouveau: fix instmem race condition around ptr stores Running a lot of VK CTS in parallel against nouveau, once every few hours you might see something like this crash. BUG: kernel NULL pointer dereference, ad

• CVE-2024-26957May 1, 2024
  affected < 4.12.14-122.219.1fixed 4.12.14-122.219.1

  In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo cards on KVM guests with debug kernel build revealed an use after free for the load field of the struct zcrypt_card. The

• CVE-2024-26948May 1, 2024
  affected < 4.12.14-122.216.1fixed 4.12.14-122.216.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add a dc_state NULL check in dc_state_release [How] Check wheather state is NULL before releasing it.

• CVE-2024-26931May 1, 2024
  affected < 4.12.14-122.216.1fixed 4.12.14-122.216.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to command failed to flush back to SCSI layer. BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 PGD 0 P4D 0 Oops: 000

• CVE-2024-26930May 1, 2024
  affected < 4.12.14-122.216.1fixed 4.12.14-122.216.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map pointer Coverity scan reported potential risk of double free of the pointer ha->vp_map. ha->vp_map was freed in qla2x00_mem_alloc(), and again freed in function

• CVE-2022-48668Apr 28, 2024
  affected < 4.12.14-122.216.1fixed 4.12.14-122.216.1

  In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in collapse range collapse range doesn't discard the affected cached region so can risk temporarily corrupting the file data. This fixes xfstest generic/031 I also decided t

• CVE-2022-48667Apr 28, 2024
  affected < 4.12.14-122.216.1fixed 4.12.14-122.216.1

  In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in insert range insert range doesn't discard the affected cached region so can risk temporarily corrupting file data. Also includes some minor cleanup (avoiding rereading in

• CVE-2022-48651Apr 28, 2024
  affected < 4.12.14-122.216.1fixed 4.12.14-122.216.1

  In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header If an AF_PACKET socket is used to send packets through ipvlan and the default xmit function of the AF_PACKET socket is changed from dev_queue_xmit()

• CVE-2022-48650Apr 28, 2024
  affected < 4.12.14-122.216.1fixed 4.12.14-122.216.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() Commit 8f394da36a36 ("scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG") made the __qlt_24xx_handle_abts() function return early if tcm_qla2xxx_find_

• CVE-2022-48636Apr 28, 2024
  affected < 4.12.14-122.216.1fixed 4.12.14-122.216.1

  In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup Fix Oops in dasd_alias_get_start_dev() function caused by the pavgroup pointer being NULL. The pavgroup pointer is checked on the entranc

• CVE-2024-26928Apr 28, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_debug_files_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

• CVE-2023-52646Apr 26, 2024
  affected < 4.12.14-122.216.1fixed 4.12.14-122.216.1

  In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 ("aio: Make it possible to remap aio ring") introduced a null-deref if mremap is called on an old aio mapping after fork as mm->ioctx_table will be set

• CVE-2024-26923MedApr 25, 2024
  affected < 4.12.14-122.222.1fixed 4.12.14-122.222.1

  In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM