suse/kgraft-patch-SLE12-SP5_Update_69&distro=SUSE Linux Enterprise Live Patching 12 SP5

Vulnerabilities (183)

• CVE-2022-49491Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() It will cause null-ptr-deref in resource_size(), if platform_get_resource() returns NULL, move calling resource_size() after devm_ioremap_resource()

• CVE-2022-49474Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout Connecting the same socket twice consecutively in sco_sock_connect() could lead to a race condition where two sco_conn objects are created

• CVE-2022-49467Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() drm_gem_object_lookup will call drm_gem_object_get inside. So cursor_bo needs to be put when msm_gem_get_and_pin_iova fails.

• CVE-2022-49460Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: rk3399_dmc: Disable edev on remove() Otherwise we hit an unablanced enable-count when unbinding the DFI device: [ 1279.659119] ------------[ cut here ]------------ [ 1279.659179] WARNING: CPU: 2

• CVE-2022-49445Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() It will cause null-ptr-deref when using 'res', if platform_get_resource() returns NULL, so move using 'res' after devm_ioremap_resou

• CVE-2022-49441Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: tty: fix deadlock caused by calling printk() under tty_port->lock pty_write() invokes kmalloc() which may invoke a normal printk() to print failure message. This can cause a deadlock in the scenario reported b

• CVE-2022-49420Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: net: annotate races around sk->sk_bound_dev_if UDP sendmsg() is lockless, and reads sk->sk_bound_dev_if while this field can be changed by another thread. Adds minimal annotations to avoid KCSAN splats for UDP

• CVE-2022-49396Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix reset-controller leak on probe errors Make sure to release the lane reset controller in case of a late probe error (e.g. probe deferral). Note that due to the reset controller being defined

• CVE-2022-49382Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: soc: rockchip: Fix refcount leak in rockchip_grf_init of_find_matching_node_and_match returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to

• CVE-2022-49371Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: driver core: fix deadlock in __device_attach In __device_attach function, The lock holding logic is as follows: ... __device_attach device_lock(dev) // get lock dev async_schedule_dev(__device_attach_asy

• CVE-2022-49326Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: rtl818x: Prevent using not initialized queues Using not existing queues can panic the kernel with rtl8180/rtl8185 cards. Ignore the skb priority for those cards, they only have one tx queue. Pierre Asselin (pa@

• CVE-2022-49320Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type In zynqmp_dma_alloc/free_chan_resources functions there is a potential overflow in the below expressions. dma_alloc_coherent(chan->dev,

• CVE-2022-49253Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: media: usb: go7007: s2250-board: fix leak in probe() Call i2c_unregister_device(audio) on this error path.

• CVE-2022-49248Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction AV/C deferred transaction was supported at a commit 00a7bb81c20f ("ALSA: firewire-lib: Add support for deferred transaction") while 'defe

• CVE-2022-49235Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: ath9k_htc: fix uninit value bugs Syzbot reported 2 KMSAN bugs in ath9k. All of them are caused by missing field initialization. In htc_connect_service() svc_meta_len and pad are not initialized. Based on code

• CVE-2022-49216Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix reference leak in tegra_dsi_ganged_probe The reference taken by 'of_find_device_by_node()' must be released when not needed anymore. Add put_device() call to fix this.

• CVE-2022-49212Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init The reference counting issue happens in several error handling paths on a refcounted object "nc->dmac". In these paths, the function simply

• CVE-2022-49190Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: kernel/resource: fix kfree() of bootmem memory again Since commit ebff7d8f270d ("mem hotunplug: fix kfree() of bootmem memory"), we could get a resource allocated during boot via alloc_resource(). And it's req

• CVE-2022-49168Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clean up repair bio if submit fails The submit helper will always run bio_endio() on the bio if it fails to submit, so cleaning up the bio just leads to a variety of use-after-free and NULL pointe

• CVE-2022-49145Feb 26, 2025
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data If the NumEntries field in the _CPC return package is less than 2, do not attempt to access the "Revision" element of that package, because it may n