suse/kernel-syms-azure&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6

Vulnerabilities (3,769)

• CVE-2024-26944May 1, 2024
  affected < 6.4.0-150600.8.8.1fixed 6.4.0-150600.8.8.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free in do_zone_finish() Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070. BTRFS info (device nullb1): scrub: finishe

• CVE-2024-26943May 1, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: nouveau/dmem: handle kcalloc() allocation failure The kcalloc() in nouveau_dmem_evict_chunk() will return null if the physical memory has run out. As a result, if we dereference src_pfns, dst_pfns or dma_addrs,

• CVE-2024-26940May 1, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed The driver creates /sys/kernel/debug/dri/0/mob_ttm even when the corresponding ttm_resource_manager is not allocated. This leads to a crash w

• CVE-2024-26938May 1, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() If we have no VBT, or the VBT didn't declare the encoder in question, we won't have the 'devdata' for the encoder. Instead of

• CVE-2024-26933May 1, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port "disable" sysfs attribute The show and store callback routines for the "disable" sysfs attribute file in port.c acquire the device lock for the port's parent hub device. This ca

• CVE-2024-26932May 1, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() When unregister pd capabilitie in tcpm, KASAN will capture below double -free issue. The root cause is the same capabilitiy will be kfreed tw

• CVE-2024-26928Apr 28, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_debug_files_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.

• CVE-2024-26925MedApr 25, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), otherwise, async GC

• CVE-2024-26923MedApr 25, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM

• CVE-2024-26924Apr 24, 2024
  affected < 6.4.0-150600.8.23.1fixed 6.4.0-150600.8.23.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: do not free live element Pablo reports a crash with large batches of elements with a back-to-back add/remove pattern. Quoting Pablo: add_elem("00000000") timeout 100 ms ... ad

• CVE-2024-26922Apr 23, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate the parameters of bo mapping operations more clearly Verify the parameters of amdgpu_vm_bo_(map/replace_map/clearing_mappings) in one common place.

• CVE-2024-26921Apr 18, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: inet: inet_defrag: prevent sk release while still in use ip_local_out() and other functions can pass skb->sk as function argument. If the skb is a fragment and reassembly happens before such function call retu

• CVE-2024-26920MedApr 17, 2024
  affected < 6.4.0-150600.8.8.1fixed 6.4.0-150600.8.8.1

  In the Linux kernel, the following vulnerability has been resolved: tracing/trigger: Fix to return error if failed to alloc snapshot Fix register_snapshot_trigger() to return error code if it failed to allocate a snapshot instead of 0 (success). Unless that, it will register sn

• CVE-2023-52645Apr 17, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix race conditions with genpd If the power domains are registered first with genpd and *after that* the driver attempts to power them on in the probe sequence, then it is possible that a ra

• CVE-2024-26906MedApr 17, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() When trying to use copy_from_kernel_nofault() to read vsyscall page through a bpf program, the following oops was reported: BUG: unable to h

• CVE-2024-26903MedApr 17, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security During our fuzz testing of the connection and disconnection process at the RFCOMM layer, we discovered this bug. By comparing the packets from a no

• CVE-2024-26901MedApr 17, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak syzbot identified a kernel information leak vulnerability in do_sys_name_to_handle() and issued the following report [1]. [1] "BUG: KMSAN: kernel-i

• CVE-2024-26898HigApr 17, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts This patch is against CVE-2023-6270. The description of cve is: A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel.

• CVE-2024-26889MedApr 17, 2024
  affected < 6.4.0-150600.8.8.1fixed 6.4.0-150600.8.8.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixe

• CVE-2024-26885HigApr 17, 2024
  affected < 6.4.0-150600.8.5.1fixed 6.4.0-150600.8.5.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAP_HASH overflow check on 32-bit arches The devmap code allocates a number hash buckets equal to the next power of two of the max_entries value provided when creating the map. When rounding up to t