suse/kgraft-patch-SLE12-SP5_Update_67&distro=SUSE Linux Enterprise Live Patching 12 SP5

Vulnerabilities (245)

• CVE-2022-49407Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: dlm: fix plock invalid read This patch fixes an invalid read showed by KASAN. A unlock will allocate a "struct plock_op" and a followed send_op() will append it to a global send_list data structure. In some cas

• CVE-2022-49404Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix potential integer multiplication overflow errors When multiplying of different types, an overflow is possible even when storing the result in a larger type. This is because the conversion is done

• CVE-2022-49397Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix struct clk leak on probe errors Make sure to release the pipe clock reference in case of a late probe error (e.g. probe deferral).

• CVE-2022-49395Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: um: Fix out-of-bounds read in LDT setup syscall_stub_data() expects the data_count parameter to be the number of longs, not bytes. ================================================================== BUG: KASA

• CVE-2022-49389Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: usb: usbip: fix a refcount leak in stub_probe() usb_get_dev() is called in stub_device_alloc(). When stub_probe() fails after that, usb_put_dev() needs to be called to release the reference. Fix this by moving

• CVE-2022-49388Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: ubi: ubi_create_volume: Fix use-after-free when volume creation failed There is an use-after-free problem for 'eba_tbl' in ubi_create_volume()'s error handling path: ubi_eba_replace_table(vol, eba_tbl) v

• CVE-2022-49372Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: tcp: tcp_rtx_synack() can be called from process context Laurent reported the enclosed report [1] This bug triggers with following coditions: 0) Kernel built with CONFIG_DEBUG_PREEMPT=y 1) A new passive Fast

• CVE-2022-49370Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add() If this function returns an error,

• CVE-2022-49367Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. mv88e6xxx_mdio_register(

• CVE-2022-49349Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4_rename_dir_prepare We got issue as follows: EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue ext4_get_first_dir_block: bh->b_data=0xffff88810bee6000 l

• CVE-2022-49347Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on in ext4_writepages we got issue as follows: EXT4-fs error (device loop0): ext4_mb_generate_buddy:1141: group 0, block bitmap and bg descriptor inconsistent: 25 vs 31513 free cls ------------[ c

• CVE-2022-49344Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix a data-race in unix_dgram_peer_wake_me(). unix_dgram_poll() calls unix_dgram_peer_wake_me() without `other`'s lock held and check if its receive queue is full. Here we need to use unix_recvq_full_

• CVE-2022-49343Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. That can easily lead to the kernel corrupting tree nodes that were already v

• CVE-2022-49337Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock When user_dlm_destroy_lock failed, it didn't clean up the flags it set before exit. For USER_LOCK_IN_TEARDOWN, if this function fails because of lock i

• CVE-2022-49332Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Address NULL pointer dereference after starget_to_rport() Calls to starget_to_rport() may return NULL. Add check for NULL rport before dereference.

• CVE-2022-49331Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling Error paths do not free previously allocated memory. Add devm_kfree() to those failure paths.

• CVE-2022-49330Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd syzbot got a new report [1] finally pointing to a very old bug, added in initial support for MTU probing. tcp_mtu_probe() has checks about starting an MTU prob

• CVE-2022-49322Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting bootparams="trace_event=initcall:initcall_start tp_printk=1" in the cmdline, the output_printk() was called, and the spin_loc

• CVE-2022-49321Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: xprtrdma: treat all calls not a bcall when bc_serv is NULL When a rdma server returns a fault format reply, nfs v3 client may treats it as a bcall when bc service is not exist. The debug message at rpcrdma_bc_

• CVE-2022-49313Feb 26, 2025
  affected < 1-8.5.1fixed 1-8.5.1

  In the Linux kernel, the following vulnerability has been resolved: drivers: usb: host: Fix deadlock in oxu_bus_suspend() There is a deadlock in oxu_bus_suspend(), which is shown below: (Thread 1) | (Thread 2) | timer_action() ox