suse/kernel-syms-rt&distro=SUSE Real Time Module 15 SP7

Vulnerabilities (2,100)

• CVE-2023-53311Sep 16, 2025
  affected < 6.4.0-150700.7.22.1fixed 6.4.0-150700.7.22.1

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput During unmount process of nilfs2, nothing holds nilfs_root structure after nilfs2 detaches its writer in nilfs_detach_log_writer(). Previous

• CVE-2023-53309Sep 16, 2025
  affected < 6.4.0-150700.7.22.1fixed 6.4.0-150700.7.22.1

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeon_cs_parser_init The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size *= sizeof(uint32_t), will cause uni

• CVE-2023-53305Sep 16, 2025
  affected < 6.4.0-150700.7.22.1fixed 6.4.0-150700.7.22.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in l2cap_le_command_rej.

• CVE-2023-53304Sep 16, 2025
  affected < 6.4.0-150700.7.22.1fixed 6.4.0-150700.7.22.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: fix overlap expiration walk The lazy gc on insert that should remove timed-out entries fails to release the other half of the interval, if any. Can be reproduced with tests/shell/tes

• CVE-2025-39835HigSep 16, 2025
  affected < 6.4.0-150700.7.19.1fixed 6.4.0-150700.7.19.1

  In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a mediu

• CVE-2025-39828HigSep 16, 2025
  affected < 6.4.0-150700.7.22.1fixed 6.4.0-150700.7.22.1

  In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). syzbot reported the splat below. [0] When atmtcp_v_open() or atmtcp_v_close() is called via connect() or close(), atmtcp_send_control() is called

• CVE-2025-39827MedSep 16, 2025
  affected < 6.4.0-150700.7.22.1fixed 6.4.0-150700.7.22.1

  In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in rose_neigh refcount Current implementation maintains two separate reference counting mechanisms: the 'count' field in struct rose_neigh tracks references from rose_node str

• CVE-2025-39826HigSep 16, 2025
  affected < 6.4.0-150700.7.22.1fixed 6.4.0-150700.7.22.1

  In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The 'use' field in struct rose_neigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a rose_neigh structure is freed while

• CVE-2025-39825MedSep 16, 2025
  affected < 6.4.0-150700.7.19.1fixed 6.4.0-150700.7.19.1

  In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename request to the server, the rename process also involves closing any deferred close, waiting for outstanding I/O to complete as

• CVE-2025-39824HigSep 16, 2025
  affected < 6.4.0-150700.7.22.1fixed 6.4.0-150700.7.22.1

  In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLAIMED_INPUT validation After hid_hw_start() is called hidinput_connect() will eventually be called to set up the device with the input layer since the HID_CONNECT_DEFAULT connect ma

• CVE-2025-39823HigSep 16, 2025
  affected < 6.4.0-150700.7.19.1fixed 6.4.0-150700.7.19.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min and dest_id are guest-controlled indices. Using array_index_nospec() after the bounds checks clamps these values to mitigate speculative ex

• CVE-2025-39819MedSep 16, 2025
  affected < 6.4.0-150700.7.25.1fixed 6.4.0-150700.7.25.1

  In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in `smb2_compound_op`. Such inconsistent update could lead to possible resource leaks. Why it is a possible bug:

• CVE-2025-39817HigSep 16, 2025
  affected < 6.4.0-150700.7.34.1fixed 6.4.0-150700.7.34.1

  In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe8/0x190

• CVE-2025-39816MedSep 16, 2025
  affected < 6.4.0-150700.7.19.1fixed 6.4.0-150700.7.19.1

  In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths Since the buffers are mapped from userspace, it is prudent to use READ_ONCE() to read the value into a local variable, and use that for

• CVE-2025-39813MedSep 16, 2025
  affected < 6.4.0-150700.7.22.1fixed 6.4.0-150700.7.22.1

  In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling ftrace_dump_one() concurrently with reading trace_pipe, a WARN_ON_ONCE() in trace_printk_seq() can be triggered due to a race co

• CVE-2025-39812MedSep 16, 2025
  affected < 6.4.0-150700.7.22.1fixed 6.4.0-150700.7.22.1

  In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctp_v6_from_sk() syzbot found that sin6_scope_id was not properly initialized, leading to undefined behavior. Clear sin6_scope_id and sin6_flowinfo. BUG: KMSAN: uninit-value i

• CVE-2025-39808MedSep 16, 2025
  affected < 6.4.0-150700.7.22.1fixed 6.4.0-150700.7.22.1

  In the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() in ntrig_report_version(), hdev parameter passed from hid_probe(). sending descriptor to /dev/uhid can make hdev->dev.parent->parent to

• CVE-2025-39806HigSep 16, 2025
  affected < 6.4.0-150700.7.22.1fixed 6.4.0-150700.7.22.1

  In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A malicious HID device can trigger a slab out-of-bounds during mt_report_fixup() by passing in report descriptor smaller than 607 bytes. mt_re

• CVE-2025-39836Sep 16, 2025
  affected < 6.4.0-150700.7.31.1fixed 6.4.0-150700.7.31.1

  In the Linux kernel, the following vulnerability has been resolved: efi: stmm: Fix incorrect buffer allocation method The communication buffer allocated by setup_mm_hdr() is later on passed to tee_shm_register_kernel_buf(). The latter expects those buffers to be contiguous page

• CVE-2025-39834Sep 16, 2025
  affected < 6.4.0-150700.7.19.1fixed 6.4.0-150700.7.19.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow When an invalid stc_type is provided, the function allocates memory for shared_stc but jumps to unlock_and_out without freeing it, caus