suse/kernel-syms-rt&distro=SUSE Real Time Module 15 SP7

Vulnerabilities (2,202)

• CVE-2023-54194Dec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree The call stack shown below is a scenario in the Linux 4.19 kernel. Allocating memory failed where exfat fs use kmalloc_array due to system memory

• CVE-2023-54189Dec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

• CVE-2023-54185Dec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUG_ON()'s in add_new_free_space() At add_new_free_space() we have these BUG_ON()'s that are there to deal with any failure to add free space to the in memory free space cache. Such failures are m

• CVE-2023-54183Dec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() If fwnode_graph_get_remote_endpoint() fails, 'fwnode' is known to be NULL, so fwnode_handle_put() is a no-op. Release the reference t

• CVE-2023-54181Dec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix issue in verifying allow_ptr_leaks After we converted the capabilities of our networking-bpf program from cap_sys_admin to cap_net_admin+cap_bpf, our networking-bpf program failed to start. Because it

• CVE-2023-54179Dec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Array index may go out of bound Klocwork reports array 'vha->host_str' of size 16 may use index value(s) 16..19. Use snprintf() instead of sprintf().

• CVE-2023-54178Dec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() when kmalloc() fail to allocate memory in kasprintf(), name or full_name will be NULL, strcmp() will cause null pointer dereferenc

• CVE-2023-54177Dec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: quota: fix warning in dqgrab() There's issue as follows when do fault injection: WARNING: CPU: 1 PID: 14870 at include/linux/quotaops.h:51 dquot_disable+0x13b7/0x18c0 Modules linked in: CPU: 1 PID: 14870 Comm:

• CVE-2023-54173HigDec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_event_output We received report [1] of kernel crash, which is caused by using nesting protection without disabled preemption. The bpf_event_output can be called by programs execu

• CVE-2023-54172Dec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction On hardware that supports Indirect Branch Tracking (IBT), Hyper-V VMs with ConfigVersion 9.3 or later support IBT in the guest. However, curre

• CVE-2023-54171Dec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak of iter->temp when reading trace_pipe kmemleak reports: unreferenced object 0xffff88814d14e200 (size 256): comm "cat", pid 336, jiffies 4294871818 (age 779.490s) hex dump (fir

• CVE-2023-54170Dec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assoc_array When making a DNS query inside the kernel using dns_query(), the request code can in rare cases end up creating a duplicate index key in the assoc_ar

• CVE-2023-54169Dec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_ptp_open When kvzalloc_node or kvzalloc failed in mlx5e_ptp_open, the memory pointed by "c" or "cparams" is not freed, which can lead to a memory leak. Fix by freeing the arr

• CVE-2023-54166HigDec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: igc: Fix Kernel Panic during ndo_tx_timeout callback The Xeon validation group has been carrying out some loaded tests with various HW configurations, and they have seen some transmit queue time out happening d

• CVE-2023-54164HigDec 30, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix iso_conn related locking and validity issues sk->sk_state indicates whether iso_pi(sk)->conn is valid. Operations that check/update sk_state and access conn should hold lock_sock, otherwise

• CVE-2025-68750Dec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: usb: potential integer overflow in usbg_make_tpg() The variable tpgt in usbg_make_tpg() is defined as unsigned long and is assigned to tpgt->tport_tpgt, which is defined as u16. This may cause an integer overfl

• CVE-2025-68749HigDec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition when unbinding BOs Fix 'Memory manager not clean during takedown' warning that occurs when ivpu_gem_bo_free() removes the BO from the BOs list before it gets unmapped. Then file_p

• CVE-2025-68747HigDec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF on kernel BO VA nodes If the MMU is down, panthor_vm_unmap_range() might return an error. We expect the page table to be updated still, and if the MMU is blocked, the rest of the GPU should

• CVE-2025-68746HigDec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the CPU that the QSPI interrupt handler runs on (typically CPU 0) is excessively busy, it can lead to rare cases of the IRQ thread not running before the transfer t

• CVE-2025-68744Dec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Free special fields when update [lru_,]percpu_hash maps As [lru_,]percpu_hash maps support BPF_KPTR_{REF,PERCPU}, missing calls to 'bpf_obj_free_fields()' in 'pcpu_copy_value()' could cause the memory refe