suse/kgraft-patch-SLE12-SP5_Update_76&distro=SUSE Linux Enterprise Live Patching 12 SP5

Vulnerabilities (155)

• CVE-2022-50677Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: ipmi: fix use after free in _ipmi_destroy_user() The intf_free() function frees the "intf" pointer so we cannot dereference it again on the next line.

• CVE-2022-50668Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock due to mbcache entry corruption When manipulating xattr blocks, we can deadlock infinitely looping inside ext4_xattr_block_set() where we constantly keep finding xattr block for reuse in mbca

• CVE-2023-53819Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: amdgpu: validate offset_in_bo of drm_amdgpu_gem_va This is motivated by OOB access in amdgpu_vm_update_range when offset_in_bo+map_size overflows. v2: keep the validations in amdgpu_vm_bo_map v3: add the valid

• CVE-2023-53809Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register() When a file descriptor of pppol2tp socket is passed as file descriptor of UDP socket, a recursive deadlock occurs in l2tp_tunnel_register(). Thi

• CVE-2023-53803Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() A fix for: BUG: KASAN: slab-out-of-bounds in ses_enclosure_data_process+0x949/0xe30 [ses] Read of size 1 at addr ffff88a1b043a451 by task syste

• CVE-2023-53794Dec 9, 2025
  affected < 4-2.1fixed 4-2.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't collect exiting session in smb2_reconnect_server(), because it will be released soon. Note that the exiting session will stay in s

• CVE-2023-53788Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() tuning_ctl_set() might have buffer overrun at (X) if it didn't break from loop by matching (A). static int tuning_ctl_set(...) { for (i = 0; i < T

• CVE-2023-53786Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: dm flakey: fix a crash with invalid table line This command will crash with NULL pointer dereference: dmsetup create flakey --table \ "0 `blockdev --getsize /dev/ram0` flakey /dev/ram0 0 0 1 2 corrupt_bio_by

• CVE-2023-53781Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in tcp_write_timer_handler(). With Eric's ref tracker, syzbot finally found a repro for use-after-free in tcp_write_timer_handler() by kernel TCP sockets. [0] If SMC creates a kernel so

• CVE-2022-50656Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Clear nfc_target before being used Fix a slab-out-of-bounds read that occurs in nla_put() called from nfc_genl_send_target() when target->sensb_res_len, which is duplicated from an nfc_target in pn5

• CVE-2022-50646Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix possible memory leak in hpsa_init_one() The hpda_alloc_ctlr_info() allocates h and its field reply_map. However, in hpsa_init_one(), if alloc_percpu() failed, the hpsa_init_one() jumps to clean1

• CVE-2022-50643Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_copy_file_range() If the file is used by swap, before return -EOPNOTSUPP, should free the xid, otherwise, the xid will be leaked.

• CVE-2022-50640Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: mmc: core: Fix kernel panic when remove non-standard SDIO card SDIO tuple is only allocated for standard SDIO card, especially it causes memory corruption issues when the non-standard SDIO card has removed, whi

• CVE-2022-50638Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on in __es_tree_search caused by bad boot loader inode We got a issue as fllows: ================================================================== kernel BUG at fs/ext4/extents_status.c:203! in

• CVE-2022-50636Dec 9, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_device_is_present() for VFs by checking PF pci_device_is_present() previously didn't work for VFs because it reads the Vendor and Device ID, which are 0xffff for VFs, which looks like they aren't p

• CVE-2023-53765Dec 8, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: dm cache: free background tracker's queued work in btracker_destroy Otherwise the kernel can BUG with: [ 2245.426978] ============================================================================= [ 2245.435155

• CVE-2023-53754Dec 8, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() When if_type equals zero and pci_resource_start(pdev, PCI_64BIT_BAR4) returns false, drbl_regs_memmap_p is not remapped. This passes a NULL pointer to

• CVE-2023-53748Dec 8, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup variable *nplanes is provided by user via system call argument. The possible value of q_data->fmt->num_planes is 1-3, while the

• CVE-2023-53746Dec 8, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix memory leak in vfio_ap device driver The device release callback function invoked to release the matrix device uses the dev_get_drvdata(device *dev) function to retrieve the pointer to the vfi

• CVE-2022-50630Dec 8, 2025
  affected < 1-8.7.1fixed 1-8.7.1

  In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: fix UAF in hugetlb_handle_userfault The vma_lock and hugetlb_fault_mutex are dropped before handling userfault and reacquire them again after handle_userfault(), but reacquire the vma_lock could le