suse/kgraft-patch-SLE12-SP5_Update_54&distro=SUSE Linux Enterprise Live Patching 12 SP5

Vulnerabilities (86)

• CVE-2023-52531Mar 2, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix a memory corruption issue A few lines above, space is kzalloc()'ed for: sizeof(struct iwl_nvm_data) + sizeof(struct ieee80211_channel) + sizeof(struct ieee80211_rate) 'mvm->nvm_data'

• CVE-2023-52530Mar 2, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_link() is called by ieee80211_gtk_rekey_add() but returns 0 due to KRACK protection (identical key reinstall), ieee80211_gtk_rekey_add() will

• CVE-2023-52502Mar 2, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a race in nfc_llcp_sock_get(), leading to UAF. Getting a reference on the socket found in a lookup while holding a lock s

• CVE-2022-48627Mar 2, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer A memory overlapping copy occurs when deleting a long line. This memory overlapping copy can cause data corruption when scr_memcpyw is optimized to m

• CVE-2021-47078Mar 1, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Clear all QP fields if creation failed rxe_qp_do_cleanup() relies on valid pointer values in QP for the properly created ones, but in case rxe_qp_from_init() failed it was filled with garbage and caus

• CVE-2021-47077Mar 1, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Add pointer checks in qedf_update_link_speed() The following trace was observed: [ 14.042059] Call Trace: [ 14.042061] [ 14.042068] qedf_link_update+0x144/0x1f0 [qedf] [ 14.0421

• CVE-2021-47076Mar 1, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Return CQE error if invalid lkey was supplied RXE is missing update of WQE status in LOCAL_WRITE failures. This caused the following kernel panic if someone sent an atomic operation with an explicitl

• CVE-2021-47054Feb 29, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: bus: qcom: Put child node before return Put child node before return to fix potential reference count leak. Generally, the reference count of child is incremented and decremented automatically in the macro for_

• CVE-2023-52482Feb 29, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors Add mitigation for the speculative return stack overflow vulnerability which exists on Hygon processors too.

• CVE-2023-52478Feb 29, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidpp_connect_event() has *four* time-of-check vs time-of-use (TOCTOU) races when it races with itself. hidpp_connect_event() primarily runs fro

• CVE-2023-52475Feb 29, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: Input: powermate - fix use-after-free in powermate_config_complete syzbot has found a use-after-free bug [1] in the powermate driver. This happens when the device is disconnected, which leads to a memory free f

• CVE-2021-47013Feb 28, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..). If some error happens in emac_tx_fill_tpd(), the skb will be freed via dev_kfree_sk

• CVE-2021-46992Feb 28, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid overflows in nft_hash_buckets() Number of buckets being stored in 32bit variables, we have to ensure that no overflows occur in nft_hash_buckets() syzbot injected a size == 0x4000000

• CVE-2021-46991Feb 28, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: i40e: Fix use-after-free in i40e_client_subtask() Currently the call to i40e_client_del_instance frees the object pf->cinst, however pf->cinst->lan_info is being accessed after the free. Fix this by adding the

• CVE-2020-36784Feb 28, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in functions cdns_i2c_master_xfer and cdns_reg_slave. However, pm_runtime_get_

• CVE-2021-46974Feb 27, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix masking negation logic upon negative dst register The negation logic for the case where the off_reg is sitting in the dst register is not correct given then we cannot just invert the add to a sub or vi

• CVE-2021-46955Feb 27, 2024
  affected < 4-8.10.1fixed 4-8.10.1

  In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on kernels built with KASAN, it's possible to see the following splat while testing fragmentation of IPv4 packets: BUG: KASAN

• CVE-2021-46953Feb 27, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure When failing the driver probe because of invalid firmware properties, the GTDT driver unmaps the interrupt that it mapped earlier. However

• CVE-2020-36777Feb 27, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: Fix memory leak in dvb_media_device_free() dvb_media_device_free() is leaking memory. Free `dvbdev->adapter->conn` before setting it to NULL, as documented in include/media/media-device.h: "The m

• CVE-2021-46932Feb 27, 2024
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot has reported warning in __flush_work(). This warning is caused by work->func == NULL, which means missing work initialization. This may hap