suse/kernel-syms-rt&distro=SUSE Real Time Module 15 SP7

Vulnerabilities (2,202)

• CVE-2025-68725MedDec 24, 2025
  affected < 6.4.0-150700.7.31.1fixed 6.4.0-150700.7.31.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. reported that their fuzzer tool was able to trigger a skb_warn_bad_offload() from netif_skb_features() -> gso_features_check(). When

• CVE-2025-68724HigDec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id Use check_add_overflow() to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetric_k

• CVE-2025-68380Dec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix peer HE MCS assignment In ath11k_wmi_send_peer_assoc_cmd(), peer's transmit MCS is sent to firmware as receive MCS while peer's receive MCS sent as transmit MCS, which goes against firmwire's

• CVE-2025-68379HigDec 24, 2025
  affected < 6.4.0-150700.7.31.1fixed 6.4.0-150700.7.31.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure A NULL pointer dereference can occur in rxe_srq_chk_attr() when ibv_modify_srq() is invoked twice in succession under certain error conditions. The

• CVE-2025-68378Dec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check in __bpf_get_stackid() Syzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid() when copying stack trace data. The issue occurs when the perf trace contains m

• CVE-2025-68374Dec 24, 2025
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: md: fix rcu protection in md_wakeup_thread We attempted to use RCU to protect the pointer 'thread', but directly passed the value when calling md_wakeup_thread(). This means that the RCU pointer has been acquir

• CVE-2025-68372Dec 24, 2025
  affected < 6.4.0-150700.7.31.1fixed 6.4.0-150700.7.31.1

  In the Linux kernel, the following vulnerability has been resolved: nbd: defer config put in recv_work There is one uaf issue in recv_work when running NBD_CLEAR_SOCK and NBD_CMD_RECONFIGURE: nbd_genl_connect // conf_ref=2 (connect and recv_work A) nbd_open // co

• CVE-2025-68367Dec 24, 2025
  affected < 6.4.0-150700.7.31.1fixed 6.4.0-150700.7.31.1

  In the Linux kernel, the following vulnerability has been resolved: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse The following warning appears when running syzkaller, and this issue also exists in the mainline code. ------------[ cut here ]------------ li

• CVE-2025-68366Dec 24, 2025
  affected < 6.4.0-150700.7.31.1fixed 6.4.0-150700.7.31.1

  In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one use-after-free warning when running NBD_CMD_CONNECT and NBD_CLEAR_SOCK: nbd_genl_connect nbd_alloc_and_init_config // config_refs=1 nbd_start_devic

• CVE-2025-68365HigDec 24, 2025
  affected < 6.4.0-150700.7.31.1fixed 6.4.0-150700.7.31.1

  In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfs_read_hdr (3) - KMSAN: uninit-value in bcmp (3) Memory is allocated by __ge

• CVE-2025-68363Dec 24, 2025
  affected < 6.4.0-150700.7.31.1fixed 6.4.0-150700.7.31.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Check skb->transport_header is set in bpf_skb_check_mtu The bpf_skb_check_mtu helper needs to use skb->transport_header when the BPF_MTU_CHK_SEGS flag is used: bpf_skb_check_mtu(skb, ifindex, &mtu_len, 0

• CVE-2025-68362Dec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() The rtl8187_rx_cb() calculates the rx descriptor header address by subtracting its size from the skb tail pointer. However, it does not

• CVE-2025-68354Dec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex regulator_supply_alias_list was accessed without any locking in regulator_supply_alias(), regulator_register_supply_alias(), and re

• CVE-2025-68351MedDec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: exfat: fix refcount leak in exfat_find Fix refcount leaks in `exfat_find` related to `exfat_get_dentry_set`. Function `exfat_get_dentry_set` would increase the reference counter of `es->bh` on success. Therefo

• CVE-2025-68349HigDec 24, 2025
  affected < 6.4.0-150700.7.31.1fixed 6.4.0-150700.7.31.1

  In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4_write_inode -> pnfs_layoutcommit_inode pnfs

• CVE-2025-68347HigDec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdep_read() could write more bytes to the user buffer than requested, when a user provides a buffer smaller

• CVE-2025-68346Dec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detect_stream_formats() The function detect_stream_formats() reads the stream_count value directly from a FireWire device without validating it. This can lead to out-of-bounds

• CVE-2025-68345Dec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() The acpi_get_first_physical_node() function can return NULL, in which case the get_device() function also returns NULL, but this value

• CVE-2023-54042HigDec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix VAS mm use after free The refcount on mm is dropped before the coprocessor is detached.

• CVE-2023-54038Dec 24, 2025
  affected < 6.4.0-150700.7.28.1fixed 6.4.0-150700.7.28.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link hci_connect_sco currently returns NULL when there is no link (i.e. when hci_conn_link() returns NULL). sco_connect() expects an ERR_PTR