suse/kernel-syms-azure&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6

Vulnerabilities (3,769)

• CVE-2025-21743Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix possible overflow in DPE length check Originally, it was possible for the DPE length check to overflow if wDatagramIndex + wDatagramLength > U16_MAX. This could lead to an OoB read. Move th

• CVE-2025-21742Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: use static NDP16 location in URB Original code allowed for the start of NDP16 to be anywhere within the URB based on the `wNdpIndex` value in NTH16. Only the start position of NDP16 was checked,

• CVE-2025-21741Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix DPE OoB read Fix an out-of-bounds DPE read, limit the number of processed DPEs to the amount that fits into the fixed-size NDP16 header.

• CVE-2025-21738Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported that a SCSI_IOCTL_SEND_COMMAND ioctl with out_len set to 0xd42, SCSI command set to ATA_16 PASS-THROUGH, ATA com

• CVE-2025-21736Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix possible int overflows in nilfs_fiemap() Since nilfs_bmap_lookup_contig() in nilfs_fiemap() calculates its result by being prepared to go through potentially maxblocks == INT_MAX blocks, the value i

• CVE-2025-21734Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix copy buffer page size For non-registered buffer, fastrpc driver copies the buffer and pass it to the remote subsystem. There is a problem with current implementation of page size calculation

• CVE-2025-21733Feb 27, 2025
  affected < 6.4.0-150600.8.31.1fixed 6.4.0-150600.8.31.1

  In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix resetting of tracepoints If a timerlat tracer is started with the osnoise option OSNOISE_WORKLOAD disabled, but then that option is enabled and timerlat is removed, the tracepoints that wer

• CVE-2025-21732Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error This patch addresses a race condition for an ODP MR that can result in a CQE with an error on the UMR QP. During the __mlx5_ib_dereg_mr() flow,

• CVE-2024-58019Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: nvkm/gsp: correctly advance the read pointer of GSP message queue A GSP event message consists three parts: message header, RPC header, message body. GSP calculates the number of pages to write from the total s

• CVE-2024-58018Feb 27, 2025
  affected < 6.4.0-150600.8.37.1fixed 6.4.0-150600.8.37.1

  In the Linux kernel, the following vulnerability has been resolved: nvkm: correctly calculate the available space of the GSP cmdq buffer r535_gsp_cmdq_push() waits for the available page in the GSP cmdq buffer when handling a large RPC request. When it sees at least one availab

• CVE-2024-58013Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free

• CVE-2024-58012Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params Each cpu DAI should associate with a widget. However, the topology might not create the right number of DAI widgets for aggregated amps. And i

• CVE-2024-58011Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Check for adev == NULL Not all devices have an ACPI companion fwnode, so adev might be NULL. This can e.g. (theoretically) happen when a user manually binds one of the int3472 drivers to

• CVE-2024-58007Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: soc: qcom: socinfo: Avoid out of bounds read of serial number On MSM8916 devices, the serial number exposed in sysfs is constant and does not change across individual devices. It's always: db410c:/sys/device

• CVE-2024-58006Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() In commit 4284c88fff0e ("PCI: designware-ep: Allow pci_epc_set_bar() update inbound map address") set_bar() was modified to support dynamically

• CVE-2024-58002Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation. That pointer will be used when the device is done. Which could be any

• CVE-2024-58001Feb 27, 2025
  affected < 6.4.0-150600.8.37.1fixed 6.4.0-150600.8.37.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: handle a symlink read error correctly Patch series "Convert ocfs2 to use folios". Mark did a conversion of ocfs2 to use folios and sent it to me as a giant patch for review ;-) So I've redone it as ind

• CVE-2025-21731Feb 27, 2025
  affected < 6.4.0-150600.8.34.1fixed 6.4.0-150600.8.34.1

  In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Following process can cause nbd_config UAF: 1) grab nbd_config temporarily; 2) nbd_genl_disconnect() flush all recv_work() and release the initial reference: nbd

• CVE-2025-21729Feb 27, 2025
  affected < 6.4.0-150600.8.37.1fixed 6.4.0-150600.8.37.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion The rtwdev->scanning flag isn't protected by mutex originally, so cancel_hw_scan can pass the condition, but suddenly hw_scan completion unset

• CVE-2025-21725Feb 27, 2025
  affected < 6.4.0-150600.8.31.1fixed 6.4.0-150600.8.31.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to unset link speed It isn't guaranteed that NETWORK_INTERFACE_INFO::LinkSpeed will always be set by the server, so the client must handle any values and then prevent oopses like below