suse/kernel-syms-azure&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6

Vulnerabilities (3,769)

• CVE-2024-36895May 30, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: use correct buffer size when parsing configfs lists This commit fixes uvc gadget support on 32-bit platforms. Commit 0df28607c5cb ("usb: gadget: uvc: Generalise helper functions for reuse") i

• CVE-2024-36893May 30, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Check for port partner validity before consuming it typec_register_partner() does not guarantee partner registration to always succeed. In the event of failure, port->partner is set to the err

• CVE-2024-36891May 30, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix mas_empty_area_rev() null pointer dereference Currently the code calls mas_start() followed by mas_data_end() if the maple state is MA_START, but mas_start() may return with the maple state node

• CVE-2024-36890May 30, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: mm/slab: make __free(kfree) accept error pointers Currently, if an automatically freed allocation is an error pointer that will lead to a crash. An example of this is in wm831x_gpio_dbg_show(). 171 char *l

• CVE-2024-36889May 30, 2024
  affected < 6.4.0-150600.8.8.1fixed 6.4.0-150600.8.8.1

  In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_nxt is properly initialized on connect Christoph reported a splat hinting at a corrupted snd_una: WARNING: CPU: 1 PID: 38 at net/mptcp/protocol.c:1005 __mptcp_clean_una+0x4b3/0x620 net/mptc

• CVE-2024-36887May 30, 2024
  affected < 6.4.0-150600.8.8.1fixed 6.4.0-150600.8.8.1

  In the Linux kernel, the following vulnerability has been resolved: e1000e: change usleep_range to udelay in PHY mdic access This is a partial revert of commit 6dbdd4de0362 ("e1000e: Workaround for sporadic MDI error on Meteor Lake systems"). The referenced commit used usleep_r

• CVE-2024-36886May 30, 2024
  affected < 6.4.0-150600.8.20.1fixed 6.4.0-150600.8.20.1

  In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative reported a UAF in the tipc_buf_append() error path: BUG: KASAN: slab-use-after-free in kfree_skb_list_reason+0x47e/0x4c

• CVE-2024-36883May 30, 2024
  affected < 6.4.0-150600.8.20.1fixed 6.4.0-150600.8.20.1

  In the Linux kernel, the following vulnerability has been resolved: net: fix out-of-bounds access in ops_init net_alloc_generic is called by net_alloc, which is called without any locking. It reads max_gen_ptrs, which is changed under pernet_ops_rwsem. It is read twice, first t

• CVE-2024-36882May 30, 2024
  affected < 6.4.0-150600.8.8.1fixed 6.4.0-150600.8.8.1

  In the Linux kernel, the following vulnerability has been resolved: mm: use memalloc_nofs_save() in page_cache_ra_order() See commit f2c817bed58d ("mm: use memalloc_nofs_save in readahead path"), ensure that page_cache_ra_order() do not attempt to reclaim file-backed pages too,

• CVE-2024-36881May 30, 2024
  affected < 6.4.0-150600.8.11.1fixed 6.4.0-150600.8.11.1

  In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: reset ptes when close() for wr-protected ones Userfaultfd unregister includes a step to remove wr-protect bits from all the relevant pgtable entries, but that only covered an explicit UFFDIO_UNR

• CVE-2024-36880May 30, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: add missing firmware sanity checks Add the missing sanity checks when parsing the firmware files before downloading them to avoid accessing and corrupting memory beyond the vmalloced buffer.

• CVE-2024-36032May 30, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix info leak when fetching fw build id Add the missing sanity checks and move the 255-byte build-id buffer off the stack to avoid leaking stack data through debugfs in case the build-info reply

• CVE-2024-36031May 30, 2024
  affected < 6.4.0-150600.8.20.1fixed 6.4.0-150600.8.20.1

  In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiation The expiry time of a key is unconditionally overwritten during instantiation, defaulting to turn it permanent. This causes a problem for DNS resolution as

• CVE-2023-52882May 30, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change While PLL CPUX clock rate change when CPU is running from it works in vast majority of cases, now and then it causes instability. This leads to syste

• CVE-2024-36030May 30, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix the double free in rvu_npc_freemem() Clang static checker(scan-build) warning： drivers/net/ethernet/marvell/octeontx2/af/rvu_npc.c:line 2184, column 2 Attempt to free released memory. npc_mca

• CVE-2024-36029May 30, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-msm: pervent access to suspended controller Generic sdhci code registers LED device and uses host->runtime_suspended flag to protect access to it. The sdhci-msm driver doesn't set this flag, which ca

• CVE-2024-36028May 30, 2024
  affected < 6.4.0-150600.8.48.1fixed 6.4.0-150600.8.48.1

  In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() When I did memory failure tests recently, below warning occurs: DEBUG_LOCKS_WARN_ON(1) WARNING: CPU: 8 PID: 1011 at kernel/locking/lock

• CVE-2024-36020MedMay 30, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regression introduced by commit 52424f974bc5, which causes servers hang in very hard to reproduce conditions with resets races. Using t

• CVE-2024-36026May 30, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11 While doing multiple S4 stress tests, GC/RLC/PMFW get into an invalid state resulting into hard hangs. Adding a GFX reset as workaround just before send

• CVE-2024-36025May 30, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() The app_reply->elem[] array is allocated earlier in this function and it has app_req.num_ports elements. Thus this > comparison needs to be >= to preven