File _patchinfo of Package patchinfo.36744
<patchinfo incident="36744">
<issue id="1082555" tracker="bnc">SLE15 TPM base kernel fixes</issue>
<issue id="1194869" tracker="bnc">[TRACKERBUG] 5.14 powerpc base kernel fixes</issue>
<issue id="1218644" tracker="bnc">kernel/livepatching: Add klp-convert</issue>
<issue id="1220382" tracker="bnc">L3-Question: x86/mm/ident_map: Use gbpages only where full GB page should be mapped.</issue>
<issue id="1221309" tracker="bnc">Enable IDPF driver for arm64</issue>
<issue id="1221333" tracker="bnc">L3: kvm guests freezing - kdump analysis request</issue>
<issue id="1222364" tracker="bnc">VUL-0: CVE-2024-26720: kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again</issue>
<issue id="1222590" tracker="bnc">VUL-0: CVE-2024-26782: kernel: mptcp: fix double-free on socket dismantle</issue>
<issue id="1223202" tracker="bnc">VUL-0: CVE-2024-26906: kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()</issue>
<issue id="1223656" tracker="bnc">VUL-0: CVE-2024-26953: kernel: net: esp: fix bad handling of pages from page_pool</issue>
<issue id="1223848" tracker="bnc">KVM passthrough disks are detected as 0 byte disks on guest</issue>
<issue id="1223919" tracker="bnc">5.14 kernel contains patches that depend on missing PCIe backport</issue>
<issue id="1223942" tracker="bnc">VUL-0: CVE-2022-48674: kernel: erofs: fix pcluster use-after-free on UP platforms</issue>
<issue id="1224518" tracker="bnc">VUL-0: CVE-2024-35888: kernel: erspan: make sure erspan_base_hdr is present in skb->head</issue>
<issue id="1224526" tracker="bnc">VUL-0: CVE-2024-35937: kernel: wifi: cfg80211: check A-MSDU format more carefully</issue>
<issue id="1224574" tracker="bnc">VUL-0: CVE-2024-35980: kernel: arm64: tlb: Fix TLBI RANGE operand</issue>
<issue id="1225725" tracker="bnc">VUL-0: CVE-2024-36883: kernel: net: fix out-of-bounds access in ops_init</issue>
<issue id="1225730" tracker="bnc">VUL-0: CVE-2024-36886: kernel: tipc: fix UAF in error path</issue>
<issue id="1225742" tracker="bnc">VUL-0: CVE-2024-36905: kernel: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets</issue>
<issue id="1225764" tracker="bnc">VUL-0: CVE-2024-36954: kernel: tipc: fix a possible memleak in tipc_buf_append</issue>
<issue id="1225812" tracker="bnc">VUL-0: CVE-2024-36953: kernel: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()</issue>
<issue id="1226560" tracker="bnc">VUL-0: CVE-2021-47594: kernel: mptcp: never allow the PM to close a listener subflow</issue>
<issue id="1226592" tracker="bnc">VUL-0: CVE-2024-38615: kernel: cpufreq: exit() callback is optional</issue>
<issue id="1226631" tracker="bnc">VUL-0: CVE-2024-38577: kernel: rcu-tasks: fix show_rcu_tasks_trace_gp_kthread buffer overflow</issue>
<issue id="1226748" tracker="bnc">VUL-0: CVE-2024-38589: kernel: netrom: fix possible dead-lock in nr_rt_ioctl()</issue>
<issue id="1226872" tracker="bnc">VUL-0: CVE-2024-36484: kernel: net: relax socket state check at accept time.</issue>
<issue id="1227853" tracker="bnc">VUL-0: CVE-2024-40997: kernel: cpufreq: amd-pstate: fix memory leak on CPU EPP exit</issue>
<issue id="1228410" tracker="bnc">VUL-0: CVE-2024-41016: kernel: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()</issue>
<issue id="1228430" tracker="bnc">VUL-0: CVE-2024-41023: kernel: sched/deadline: fix task_struct reference leak</issue>
<issue id="1228486" tracker="bnc">VUL-0: CVE-2024-41049: kernel: filelock: fix potential use-after-free in posix_lock_inode</issue>
<issue id="1228650" tracker="bnc">VUL-0: CVE-2024-42131: kernel: mm: avoid overflows in dirty throttling logic</issue>
<issue id="1228857" tracker="bnc">Update Broadcom Emulex lpfc driver to 14.4.0.3</issue>
<issue id="1229312" tracker="bnc">VUL-0: CVE-2024-43817: kernel: net: missing check virtio</issue>
<issue id="1229429" tracker="bnc">Update Broadcom Emulex lpfc driver for SLES15 SP7 to 14.4.0.4</issue>
<issue id="1229585" tracker="bnc">Crash due to invalid per cpu cache freelist</issue>
<issue id="1229752" tracker="bnc">VUL-0: CVE-2024-43897: kernel: net: drop bad gso csum_start and offset in virtio_net_hdr</issue>
<issue id="1229808" tracker="bnc">VUL-0: CVE-2024-44932: kernel: idpf: fix UAFs when destroying the queues</issue>
<issue id="1230055" tracker="bnc">UCS fw upgrade - half of 15sp5 servers lost all paths (fnic 1.6.0.55) while servers with older fnic driver are ok</issue>
<issue id="1230220" tracker="bnc">VUL-0: CVE-2024-44964: kernel: idpf: fix memory leaks and crashes while performing a soft reset</issue>
<issue id="1230231" tracker="bnc">VUL-0: CVE-2024-44995: kernel: net: hns3: fix a deadlock problem when config TC during resetting</issue>
<issue id="1230270" tracker="bnc">VUL-0: CVE-2023-52915: kernel: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer</issue>
<issue id="1230558" tracker="bnc">VUL-0: CVE-2024-46681: kernel: pktgen: use cpus_read_lock() in pg_net_init()</issue>
<issue id="1230827" tracker="bnc">VUL-0: CVE-2024-46800: kernel: sch/netem: fix use after free in netem_dequeue</issue>
<issue id="1230918" tracker="bnc">Network Failure when Transferring Data leads to Kernel Oops</issue>
<issue id="1231083" tracker="bnc">VUL-0: CVE-2024-46853: kernel: spi: nxp-fspi: fix the KASAN report out-of-bounds bug</issue>
<issue id="1231089" tracker="bnc">VUL-0: CVE-2024-46859: kernel: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses</issue>
<issue id="1231098" tracker="bnc">VUL-0: CVE-2024-46835: kernel: drm/amdgpu: Fix smatch static checker warning</issue>
<issue id="1231101" tracker="bnc">VUL-0: CVE-2024-46842: kernel: scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info</issue>
<issue id="1231108" tracker="bnc">VUL-0: CVE-2024-46864: kernel: x86/hyperv: fix kexec crash due to VP assist page corruption</issue>
<issue id="1231111" tracker="bnc">VUL-0: CVE-2024-46802: kernel: drm/amd/display: added NULL check at start of dc_validate_stream</issue>
<issue id="1231132" tracker="bnc">VUL-0: CVE-2024-46804: kernel: drm/amd/display: Add array index check for hdcp ddc access</issue>
<issue id="1231135" tracker="bnc">VUL-0: CVE-2024-46805: kernel: drm/amdgpu: fix the waring dereferencing hive</issue>
<issue id="1231138" tracker="bnc">VUL-0: CVE-2024-46807: kernel: drm/amd/amdgpu: Check tbo resource pointer</issue>
<issue id="1231169" tracker="bnc">VUL-0: CVE-2024-46821: kernel: drm/amd/pm: Fix negative array index read</issue>
<issue id="1231178" tracker="bnc">VUL-0: CVE-2024-46810: kernel: drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ</issue>
<issue id="1231180" tracker="bnc">ceph: remove the incorrect Fw reference check when dirtying pages</issue>
<issue id="1231181" tracker="bnc">cachefiles: fix dentry leak in cachefiles_open_file()</issue>
<issue id="1231187" tracker="bnc">VUL-0: CVE-2024-46812: kernel: drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration</issue>
<issue id="1231202" tracker="bnc">VUL-0: CVE-2024-46819: kernel: drm/amdgpu: the warning dereferencing obj for nbio_v7_4</issue>
<issue id="1231434" tracker="bnc">VUL-0: CVE-2024-46871: kernel: drm/amd/display: correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX</issue>
<issue id="1231441" tracker="bnc">VUL-0: CVE-2024-47663: kernel: staging: iio: frequency: ad9834: validate frequency parameter value</issue>
<issue id="1231452" tracker="bnc">VUL-0: CVE-2024-47665: kernel: i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup</issue>
<issue id="1231465" tracker="bnc">Kernel 6.11.2-1 only a fraction of ram is available</issue>
<issue id="1231474" tracker="bnc">VUL-0: CVE-2024-47669: kernel: nilfs2: fix state management in error path of log writing function</issue>
<issue id="1231481" tracker="bnc">VUL-0: CVE-2024-47667: kernel: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)</issue>
<issue id="1231537" tracker="bnc">VUL-0: CVE-2024-47670: kernel: ocfs2: add bounds checking to ocfs2_xattr_find_entry()</issue>
<issue id="1231541" tracker="bnc">VUL-0: CVE-2024-47671: kernel: USB: usbtmc: prevent kernel-usb-infoleak</issue>
<issue id="1231646" tracker="bnc">L3-Question: kernel crash in kernel_clone/copy_page_range</issue>
<issue id="1231849" tracker="bnc">VUL-0: CVE-2023-52917: kernel: ntb: intel: fix the NULL vs IS_ERR() bug for debugfs_create_dir()</issue>
<issue id="1231856" tracker="bnc">VUL-0: CVE-2024-47682: kernel: scsi: sd: fix off-by-one error in sd_read_block_characteristics()</issue>
<issue id="1231858" tracker="bnc">VUL-0: CVE-2024-47697: kernel: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</issue>
<issue id="1231859" tracker="bnc">VUL-0: CVE-2024-47698: kernel: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error</issue>
<issue id="1231864" tracker="bnc">VUL-0: CVE-2024-47696: kernel: RDMA/iwcm: fix WARNING:at_kernel/workqueue.c:#check_flush_dependency</issue>
<issue id="1231904" tracker="bnc">VUL-0: CVE-2024-50044: kernel: Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change</issue>
<issue id="1231916" tracker="bnc">VUL-0: CVE-2024-47699: kernel: nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()</issue>
<issue id="1231920" tracker="bnc">VUL-0: CVE-2024-47701: kernel: ext4: avoid OOB when system.data xattr changes underneath the filesystem</issue>
<issue id="1231923" tracker="bnc">L3: 15SP5 increasing number of blocked tasks and performance degrading over long time period</issue>
<issue id="1231930" tracker="bnc">VUL-0: CVE-2024-47679: kernel: vfs: fix race between evice_inodes() and find_inode()&iput()</issue>
<issue id="1231931" tracker="bnc">VUL-0: CVE-2024-47695: kernel: RDMA/rtrs-clt: reset cid to con_num - 1 to stay in bounds</issue>
<issue id="1231947" tracker="bnc">VUL-0: CVE-2024-50031: kernel: drm/v3d: Stop the active perfmon before being destroyed</issue>
<issue id="1231952" tracker="bnc">VUL-0: CVE-2024-50026: kernel: scsi: wd33c93: Don't use stale scsi_pointer value</issue>
<issue id="1231953" tracker="bnc">VUL-0: CVE-2024-50025: kernel: scsi: fnic: Move flush_work initialization out of if block</issue>
<issue id="1231959" tracker="bnc">VUL-0: CVE-2022-48983: kernel: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()</issue>
<issue id="1231978" tracker="bnc">VUL-0: CVE-2022-48982: kernel: Bluetooth: Fix crash when replugging CSR fake controllers</issue>
<issue id="1232013" tracker="bnc">VUL-0: CVE-2024-47693: kernel: IB/core: Fix ib_cache_setup_one error flow cleanup</issue>
<issue id="1232015" tracker="bnc">VUL-0: CVE-2024-47718: kernel: wifi: rtw88: always wait for both firmware loading attempts</issue>
<issue id="1232016" tracker="bnc">VUL-0: CVE-2024-47713: kernel: wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()</issue>
<issue id="1232017" tracker="bnc">VUL-0: CVE-2024-47712: kernel: wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param</issue>
<issue id="1232027" tracker="bnc">VUL-0: CVE-2022-48989: kernel: fscache: fix oops due to race with cookie_lru and use_cookie</issue>
<issue id="1232028" tracker="bnc">VUL-0: CVE-2022-48990: kernel: drm/amdgpu: fix use-after-free during gpu recovery</issue>
<issue id="1232047" tracker="bnc">VUL-0: CVE-2023-52918: kernel: media: pci: cx23885: check cx23885_vdev_init() return</issue>
<issue id="1232048" tracker="bnc">VUL-0: CVE-2024-47709: kernel: can: bcm: clear bo->bcm_proc_read after remove_proc_entry().</issue>
<issue id="1232050" tracker="bnc">VUL-0: CVE-2024-47723: kernel: jfs: fix out-of-bounds in dbNextAG() and diAlloc()</issue>
<issue id="1232056" tracker="bnc">VUL-0: CVE-2024-47737: kernel: nfsd: call cache_put if xdr_reserve_space returns NULL</issue>
<issue id="1232076" tracker="bnc">VUL-0: CVE-2024-47728: kernel: bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error</issue>
<issue id="1232080" tracker="bnc">VUL-0: CVE-2024-50013: kernel: exfat: fix memory leak in exfat_load_bitmap()</issue>
<issue id="1232094" tracker="bnc">VUL-0: CVE-2024-49985: kernel: i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume</issue>
<issue id="1232096" tracker="bnc">VUL-0: CVE-2024-49983: kernel: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free</issue>
<issue id="1232098" tracker="bnc">VUL-0: CVE-2024-49981: kernel: media: venus: fix use after free bug in venus_remove due to race condition</issue>
<issue id="1232111" tracker="bnc">VUL-0: CVE-2024-47735: kernel: RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled</issue>
<issue id="1232126" tracker="bnc">VUL-0: CVE-2024-47742: kernel: firmware_loader: block path traversal</issue>
<issue id="1232134" tracker="bnc">VUL-0: CVE-2024-49851: kernel: tpm: Clean up TPM space after command failure</issue>
<issue id="1232135" tracker="bnc">VUL-0: CVE-2024-47745: kernel: mm: call the security_mmap_file() LSM hook in remap_file_pages()</issue>
<issue id="1232141" tracker="bnc">VUL-0: CVE-2024-49966: kernel: ocfs2: cancel dqi_sync_work before freeing oinfo</issue>
<issue id="1232142" tracker="bnc">VUL-0: CVE-2024-49965: kernel: ocfs2: remove unreasonable unlock in ocfs2_read_blocks</issue>
<issue id="1232147" tracker="bnc">VUL-0: CVE-2024-49963: kernel: mailbox: bcm2835: Fix timeout during suspend mode</issue>
<issue id="1232152" tracker="bnc">VUL-0: CVE-2024-49957: kernel: ocfs2: fix null-ptr-deref when journal load failed.</issue>
<issue id="1232159" tracker="bnc">VUL-0: CVE-2024-49950: kernel: Bluetooth: L2CAP: Fix uaf in l2cap_connect</issue>
<issue id="1232162" tracker="bnc">VUL-0: CVE-2024-49947: kernel: net: test for not too small csum_start in virtio_net_hdr_to_skb()</issue>
<issue id="1232165" tracker="bnc">VUL-0: CVE-2024-49945: kernel: net/ncsi: Disable the ncsi work before freeing the associated structure</issue>
<issue id="1232180" tracker="bnc">VUL-0: CVE-2024-47749: kernel: RDMA/cxgb4: added NULL check for lookup_atid</issue>
<issue id="1232185" tracker="bnc">VUL-0: CVE-2024-47756: kernel: PCI: keystone: fix if-statement expression in ks_pcie_quirk()</issue>
<issue id="1232187" tracker="bnc">VUL-0: CVE-2024-47757: kernel: nilfs2: fix potential oob read in nilfs_btree_check_delete()</issue>
<issue id="1232189" tracker="bnc">VUL-0: CVE-2024-49850: kernel: bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos</issue>
<issue id="1232195" tracker="bnc">VUL-0: CVE-2024-49855: kernel: nbd: fix race between timeout and normal completion</issue>
<issue id="1232198" tracker="bnc">VUL-0: CVE-2024-49884: kernel: ext4: fix slab-use-after-free in ext4_split_extent_at()</issue>
<issue id="1232201" tracker="bnc">VUL-0: CVE-2024-49881: kernel: ext4: update orig_path in ext4_find_extent()</issue>
<issue id="1232218" tracker="bnc">VUL-0: CVE-2024-49891: kernel: scsi: lpfc: validate hdwq pointers before dereferencing in reset/errata paths</issue>
<issue id="1232224" tracker="bnc">VUL-0: CVE-2024-49925: kernel: fbdev: efifb: register sysfs groups through driver core</issue>
<issue id="1232232" tracker="bnc">VUL-0: CVE-2024-50062: kernel: RDMA/rtrs-srv: Avoid null pointer deref during path establishment</issue>
<issue id="1232254" tracker="bnc">VUL-0: CVE-2024-49861: kernel: bpf: Fix helper writes to read-only maps</issue>
<issue id="1232255" tracker="bnc">VUL-0: CVE-2024-49863: kernel: vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()</issue>
<issue id="1232264" tracker="bnc">VUL-0: CVE-2024-49968: kernel: ext4: filesystems without casefold feature cannot be mounted with siphash</issue>
<issue id="1232272" tracker="bnc">VUL-0: CVE-2024-49868: kernel: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion</issue>
<issue id="1232279" tracker="bnc">VUL-0: CVE-2024-49870: kernel: cachefiles: fix dentry leak in cachefiles_open_file()</issue>
<issue id="1232287" tracker="bnc">VUL-0: CVE-2024-49871: kernel: Input: adp5589-keys - fix NULL pointer dereference</issue>
<issue id="1232293" tracker="bnc">VUL-0: CVE-2022-48979: kernel: drm/amd/display: fix array index out of bound error in DCN32 DML</issue>
<issue id="1232312" tracker="bnc">VUL-0: CVE-2024-50017: kernel: x86/mm/ident_map: Use gbpages only where full GB page should be mapped.</issue>
<issue id="1232317" tracker="bnc">VUL-0: CVE-2024-50008: kernel: wifi: mwifiex: fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()</issue>
<issue id="1232318" tracker="bnc">VUL-0: CVE-2024-50009: kernel: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value</issue>
<issue id="1232333" tracker="bnc">VUL-0: CVE-2024-49875: kernel: nfsd: map the EBADMSG to nfserr_io to avoid warning</issue>
<issue id="1232334" tracker="bnc">VUL-0: CVE-2024-49907: kernel: drm/amd/display: Check null pointers before using dc->clk_mgr</issue>
<issue id="1232335" tracker="bnc">VUL-0: CVE-2024-49908: kernel: drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)</issue>
<issue id="1232339" tracker="bnc">VUL-0: CVE-2024-49877: kernel: ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate</issue>
<issue id="1232349" tracker="bnc">VUL-0: CVE-2024-49879: kernel: drm: omapdrm: Add missing check for alloc_ordered_workqueue</issue>
<issue id="1232357" tracker="bnc">VUL-0: CVE-2024-49905: kernel: drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)</issue>
<issue id="1232359" tracker="bnc">VUL-0: CVE-2024-49900: kernel: jfs: fix uninit-value access of new_ea in ea_buffer</issue>
<issue id="1232362" tracker="bnc">VUL-0: CVE-2024-49903: kernel: jfs: Fix uaf in dbFreeBits</issue>
<issue id="1232364" tracker="bnc">VUL-0: CVE-2024-49924: kernel: fbdev: pxafb: fix possible use after free in pxafb_task()</issue>
<issue id="1232370" tracker="bnc">VUL-0: CVE-2024-49935: kernel: ACPI: PAD: fix crash in exit_round_robin()</issue>
<issue id="1232371" tracker="bnc">VUL-0: CVE-2024-49921: kernel: drm/amd/display: Check null pointers before used</issue>
<issue id="1232378" tracker="bnc">VUL-0: CVE-2024-49902: kernel: jfs: check if leafidx greater than num leaves per dmap tree</issue>
<issue id="1232385" tracker="bnc">VUL-0: CVE-2024-50003: kernel: drm/amd/display: fix system hang while resume with TBT monitor</issue>
<issue id="1232387" tracker="bnc">VUL-0: CVE-2024-49934: kernel: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name</issue>
<issue id="1232394" tracker="bnc">VUL-0: CVE-2024-50007: kernel: ALSA: asihpi: fix potential OOB array access</issue>
<issue id="1232413" tracker="bnc">hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event</issue>
<issue id="1232416" tracker="bnc">VUL-0: CVE-2024-50067: kernel: uprobe: avoid out-of-bounds memory access of fetching args</issue>
<issue id="1232436" tracker="bnc">VUL-0: CVE-2024-53142: kernel: malformed cpio entry may leak early-boot memory contents</issue>
<issue id="1232483" tracker="bnc">VUL-0: CVE-2024-49989: kernel: drm/amd/display: fix double free issue during amdgpu module unload</issue>
<issue id="1232500" tracker="bnc">VUL-0: CVE-2024-50082: kernel: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race</issue>
<issue id="1232503" tracker="bnc">VUL-0: CVE-2024-50078: kernel: Bluetooth: Call iso_exit() on module unload</issue>
<issue id="1232504" tracker="bnc">VUL-0: CVE-2024-50077: kernel: Bluetooth: ISO: Fix multiple init when debugfs is disabled</issue>
<issue id="1232507" tracker="bnc">VUL-0: CVE-2024-50074: kernel: parport: Proper fix for array out-of-bounds access</issue>
<issue id="1232520" tracker="bnc">VUL-0: CVE-2024-50073: kernel: tty: n_gsm: fix use-after-free in gsm_cleanup_mux</issue>
<issue id="1232552" tracker="bnc">VUL-0: CVE-2024-49938: kernel: wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit</issue>
<issue id="1232757" tracker="bnc">Update Broadcom Emulex lpfc driver to 14.4.0.5</issue>
<issue id="1232819" tracker="bnc">VUL-0: CVE-2024-49852: kernel: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()</issue>
<issue id="1232860" tracker="bnc">VUL-0: CVE-2024-50089: kernel: unicode: Don't special case ignorable code points</issue>
<issue id="1232870" tracker="bnc">VUL-0: CVE-2024-50096: kernel: nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error</issue>
<issue id="1232873" tracker="bnc">VUL-0: CVE-2024-50095: kernel: RDMA/mad: Improve handling of timed out WRs of mad agent</issue>
<issue id="1232877" tracker="bnc">VUL-0: CVE-2024-50093: kernel: thermal: intel: int340x: processor: Fix warning during module unload</issue>
<issue id="1232878" tracker="bnc">VUL-0: CVE-2024-50103: kernel: ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()</issue>
<issue id="1232881" tracker="bnc">VUL-0: CVE-2024-50098: kernel: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down</issue>
<issue id="1232884" tracker="bnc">VUL-0: CVE-2024-50108: kernel: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too</issue>
<issue id="1232885" tracker="bnc">VUL-0: CVE-2024-50110: kernel: xfrm: fix one more kernel-infoleak in algo dumping</issue>
<issue id="1232887" tracker="bnc">VUL-0: CVE-2024-50099: kernel: arm64: probes: Remove broken LDR (literal) uprobe support</issue>
<issue id="1232888" tracker="bnc">VUL-0: CVE-2024-50135: kernel: nvme-pci: fix race condition between reset and nvme_dev_disable()</issue>
<issue id="1232890" tracker="bnc">VUL-0: CVE-2024-50134: kernel: drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA</issue>
<issue id="1232892" tracker="bnc">VUL-0: CVE-2024-50116: kernel: nilfs2: fix kernel bug due to missing clearing of buffer delay flag</issue>
<issue id="1232896" tracker="bnc">VUL-0: CVE-2024-50131: kernel: tracing: Consider the NULL character when validating the event length</issue>
<issue id="1232897" tracker="bnc">VUL-0: CVE-2024-50117: kernel: drm/amd: Guard against bad data for ATIF ACPI method</issue>
<issue id="1232905" tracker="bnc">VUL-0: CVE-2024-50128: kernel: net: wwan: fix global oob in wwan_rtnl_policy</issue>
<issue id="1232907" tracker="bnc">VUL-0: CVE-2024-50127: kernel: net: sched: fix use-after-free in taprio_change()</issue>
<issue id="1232919" tracker="bnc">VUL-0: CVE-2024-50115: kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory</issue>
<issue id="1232926" tracker="bnc">VUL-0: CVE-2024-50124: kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout</issue>
<issue id="1232928" tracker="bnc">VUL-0: CVE-2024-50125: kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout</issue>
<issue id="1232935" tracker="bnc">VUL-0: CVE-2024-50138: kernel: bpf: Use raw_spinlock_t in ringbuf</issue>
<issue id="1233035" tracker="bnc">VUL-0: CVE-2024-50155: kernel: netdevsim: use cond_resched() in nsim_dev_trap_report_work()</issue>
<issue id="1233049" tracker="bnc">VUL-0: CVE-2024-50167: kernel: be2net: fix potential memory leak in be_xmit()</issue>
<issue id="1233051" tracker="bnc">VUL-0: CVE-2024-50150: kernel: usb: typec: altmode should keep reference to parent</issue>
<issue id="1233056" tracker="bnc">VUL-0: CVE-2024-50146: kernel: net/mlx5e: don't call cleanup on profile rollback failure</issue>
<issue id="1233057" tracker="bnc">VUL-0: CVE-2024-50171: kernel: net: systemport: fix potential memory leak in bcm_sysport_xmit()</issue>
<issue id="1233061" tracker="bnc">VUL-0: CVE-2024-50153: kernel: scsi: target: core: Fix null-ptr-deref in target_alloc_device()</issue>
<issue id="1233063" tracker="bnc">VUL-0: CVE-2024-50148: kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister</issue>
<issue id="1233065" tracker="bnc">VUL-0: CVE-2024-50141: kernel: ACPI: PRM: find EFI_MEMORY_RUNTIME block for PRM handler and context</issue>
<issue id="1233067" tracker="bnc">VUL-0: CVE-2024-50147: kernel: net/mlx5: fix command bitmask initialization</issue>
<issue id="1233070" tracker="bnc">VUL-0: CVE-2024-50154: kernel: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().</issue>
<issue id="1233073" tracker="bnc">VUL-0: CVE-2024-50156: kernel: drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()</issue>
<issue id="1233074" tracker="bnc">VUL-0: CVE-2024-50160: kernel: ALSA: hda/cs8409: Fix possible NULL dereference</issue>
<issue id="1233100" tracker="bnc">VUL-0: CVE-2024-50198: kernel: iio: light: veml6030: fix IIO device retrieval from embedded device</issue>
<issue id="1233103" tracker="bnc">VUL-0: CVE-2024-50195: kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime()</issue>
<issue id="1233104" tracker="bnc">VUL-0: CVE-2024-50201: kernel: drm/radeon: Fix encoder->possible_clones</issue>
<issue id="1233105" tracker="bnc">VUL-0: CVE-2024-50189: kernel: HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()</issue>
<issue id="1233106" tracker="bnc">VUL-0: CVE-2024-50192: kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE</issue>
<issue id="1233107" tracker="bnc">VUL-0: CVE-2024-50188: kernel: net: phy: dp83869: fix memory corruption when enabling fiber</issue>
<issue id="1233108" tracker="bnc">VUL-0: CVE-2024-50187: kernel: drm/vc4: Stop the active perfmon before being destroyed</issue>
<issue id="1233110" tracker="bnc">VUL-0: CVE-2024-50186: kernel: net: explicitly clear the sk pointer, when pf->create fails</issue>
<issue id="1233111" tracker="bnc">VUL-0: CVE-2024-50194: kernel: arm64: probes: Fix uprobes for big-endian kernels</issue>
<issue id="1233113" tracker="bnc">VUL-0: CVE-2024-50196: kernel: pinctrl: ocelot: fix system hang on level based interrupts</issue>
<issue id="1233114" tracker="bnc">VUL-0: CVE-2024-50209: kernel: RDMA/bnxt_re: Add a check for memory allocation</issue>
<issue id="1233117" tracker="bnc">VUL-0: CVE-2024-50208: kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages</issue>
<issue id="1233123" tracker="bnc">VUL-0: CVE-2024-50179: kernel: ceph: remove the incorrect Fw reference check when dirtying pages</issue>
<issue id="1233125" tracker="bnc">VUL-0: CVE-2024-50180: kernel: fbdev: sisfb: Fix strbuf array overflow</issue>
<issue id="1233129" tracker="bnc">VUL-0: CVE-2024-50182: kernel: secretmem: disable memfd_secret() if arch cannot set direct map</issue>
<issue id="1233130" tracker="bnc">VUL-0: CVE-2024-50183: kernel: scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance</issue>
<issue id="1233134" tracker="bnc">boot freeze with kernel-default=5.14.21-150500.55.86 and amdgpu</issue>
<issue id="1233135" tracker="bnc">VUL-0: CVE-2024-50184: kernel: virtio_pmem: Check device status before requesting flush</issue>
<issue id="1233150" tracker="bnc">SLES15 SP5 crashed with ibmvnic reset</issue>
<issue id="1233189" tracker="bnc">VUL-0: CVE-2024-50215: kernel: nvmet-auth: assign dh_key to NULL after kfree_sensitive</issue>
<issue id="1233191" tracker="bnc">VUL-0: CVE-2024-50218: kernel: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow</issue>
<issue id="1233197" tracker="bnc">VUL-0: CVE-2024-50249: kernel: ACPI: CPPC: Make rmw_lock a raw_spin_lock</issue>
<issue id="1233205" tracker="bnc">VUL-0: CVE-2024-50229: kernel: nilfs2: fix potential deadlock with newly created symlinks</issue>
<issue id="1233206" tracker="bnc">VUL-0: CVE-2024-50230: kernel: nilfs2: fix kernel bug due to missing clearing of checked flag</issue>
<issue id="1233209" tracker="bnc">VUL-0: CVE-2024-50232: kernel: iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()</issue>
<issue id="1233210" tracker="bnc">VUL-0: CVE-2024-50233: kernel: staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()</issue>
<issue id="1233211" tracker="bnc">VUL-0: CVE-2024-50234: kernel: wifi: iwlegacy: Clear stale interrupts before resuming device</issue>
<issue id="1233212" tracker="bnc">VUL-0: CVE-2024-50236: kernel: wifi: ath10k: Fix memory leak in management tx</issue>
<issue id="1233214" tracker="bnc">VUL-0: CVE-2024-50259: kernel: netdevsim: add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()</issue>
<issue id="1233216" tracker="bnc">VUL-0: CVE-2024-50237: kernel: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower</issue>
<issue id="1233238" tracker="bnc">VUL-0: CVE-2024-50255: kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs</issue>
<issue id="1233241" tracker="bnc">Update Broadcom Emulex lpfc driver for SLES15 SP7 to 14.4.0.5 and 14.4.0.6</issue>
<issue id="1233253" tracker="bnc">VUL-0: CVE-2024-50261: kernel: macsec: fix use-after-free while sending the offloading packet</issue>
<issue id="1233255" tracker="bnc">[15-SP5][Build :36349:dtb-armv7l] ctdb HA resource does not start after node fence</issue>
<issue id="1233293" tracker="bnc">VUL-0: CVE-2024-50205: kernel: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()</issue>
<issue id="1233350" tracker="bnc">kABI breakage in "struct bpf_verifier_state_list" since update 6.4.0-150600.23.14</issue>
<issue id="1233452" tracker="bnc">VUL-0: CVE-2023-52921: kernel: drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()</issue>
<issue id="1233453" tracker="bnc">VUL-0: CVE-2024-50264: kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans</issue>
<issue id="1233454" tracker="bnc">VUL-0: CVE-2024-50265: kernel: ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()</issue>
<issue id="1233456" tracker="bnc">VUL-0: CVE-2024-50267: kernel: USB: serial: io_edgeport: fix use after free in debug printk</issue>
<issue id="1233457" tracker="bnc">VUL-0: CVE-2024-50268: kernel: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()</issue>
<issue id="1233458" tracker="bnc">VUL-0: CVE-2024-50269: kernel: usb: musb: sunxi: Fix accessing an released usb phy</issue>
<issue id="1233460" tracker="bnc">VUL-0: CVE-2024-50271: kernel: signal: restore the override_rlimit logic</issue>
<issue id="1233462" tracker="bnc">VUL-0: CVE-2024-50273: kernel: btrfs: reinitialize delayed ref list after deleting it from the list</issue>
<issue id="1233463" tracker="bnc">VUL-0: CVE-2024-50274: kernel: idpf: avoid vport access in idpf_get_link_ksettings</issue>
<issue id="1233468" tracker="bnc">VUL-0: CVE-2024-50279: kernel: dm cache: fix out-of-bounds access to the dirty bitset when resizing</issue>
<issue id="1233471" tracker="bnc">VUL-0: CVE-2024-50282: kernel: drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()</issue>
<issue id="1233476" tracker="bnc">VUL-0: CVE-2024-50287: kernel: media: v4l2-tpg: prevent the risk of a division by zero</issue>
<issue id="1233478" tracker="bnc">VUL-0: CVE-2024-50289: kernel: media: av7110: fix a spectre vulnerability</issue>
<issue id="1233479" tracker="bnc">VUL-0: CVE-2024-50290: kernel: media: cx24116: prevent overflows on SNR calculus</issue>
<issue id="1233481" tracker="bnc">VUL-0: CVE-2024-50292: kernel: ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove</issue>
<issue id="1233484" tracker="bnc">VUL-0: CVE-2024-50295: kernel: net: arc: fix the device for dma_map_single/dma_unmap_single</issue>
<issue id="1233487" tracker="bnc">VUL-0: CVE-2024-50298: kernel: net: enetc: allocate vf_state during PF probes</issue>
<issue id="1233490" tracker="bnc">VUL-0: CVE-2024-50301: kernel: security/keys: fix slab-out-of-bounds in key_task_permission</issue>
<issue id="1233491" tracker="bnc">VUL-0: CVE-2024-50302: kernel: HID: core: zero-initialize the report buffer</issue>
<issue id="1233528" tracker="bnc">SLES 15 SP5: blkio.throttle.io_service_bytes missing</issue>
<issue id="1233548" tracker="bnc">VUL-0: CVE-2024-53052: kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write</issue>
<issue id="1233552" tracker="bnc">VUL-0: CVE-2024-53058: kernel: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data</issue>
<issue id="1233553" tracker="bnc">VUL-0: CVE-2024-53059: kernel: wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()</issue>
<issue id="1233554" tracker="bnc">VUL-0: CVE-2024-53060: kernel: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported</issue>
<issue id="1233555" tracker="bnc">VUL-0: CVE-2024-53061: kernel: media: s5p-jpeg: prevent buffer overflows</issue>
<issue id="1233557" tracker="bnc">VUL-0: CVE-2024-53063: kernel: media: dvbdev: prevent the risk of out of memory access</issue>
<issue id="1233560" tracker="bnc">VUL-0: CVE-2024-53066: kernel: nfs: Fix KMSAN warning in decode_getfattr_attrs()</issue>
<issue id="1233561" tracker="bnc">VUL-0: CVE-2024-53068: kernel: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()</issue>
<issue id="1233570" tracker="bnc">VUL-0: CVE-2024-53079: kernel: mm/thp: fix deferred split unqueue naming and locking</issue>
<issue id="1233577" tracker="bnc">VUL-0: CVE-2024-53085: kernel: tpm: Lock TPM chip in tpm_pm_suspend() first</issue>
<issue id="1233580" tracker="bnc">VUL-0: CVE-2024-53088: kernel: i40e: fix race condition by adding filter's intermediate sync state</issue>
<issue id="1233977" tracker="bnc">VUL-0: CVE-2023-52922: kernel: can: bcm: Fix UAF in bcm_proc_show()</issue>
<issue id="1234012" tracker="bnc">nodes huge page allocation when there are surplus page</issue>
<issue id="1234025" tracker="bnc">VUL-0: CVE-2024-53104: kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format</issue>
<issue id="1234085" tracker="bnc">VUL-0: CVE-2024-53110: kernel: vp_vdpa: fix id_table array not null terminated error</issue>
<issue id="1234093" tracker="bnc">signal: Replace BUG_ON()s</issue>
<issue id="1234098" tracker="bnc">posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone</issue>
<issue id="1234108" tracker="bnc">cgroup/bpf: only cgroup v2 can be attached by bpf programs</issue>
<issue id="2021-47594" tracker="cve" />
<issue id="2022-48674" tracker="cve" />
<issue id="2022-48979" tracker="cve" />
<issue id="2022-48982" tracker="cve" />
<issue id="2022-48983" tracker="cve" />
<issue id="2022-48989" tracker="cve" />
<issue id="2022-48990" tracker="cve" />
<issue id="2023-52915" tracker="cve" />
<issue id="2023-52917" tracker="cve" />
<issue id="2023-52918" tracker="cve" />
<issue id="2023-52921" tracker="cve" />
<issue id="2023-52922" tracker="cve" />
<issue id="2024-26782" tracker="cve" />
<issue id="2024-26906" tracker="cve" />
<issue id="2024-26953" tracker="cve" />
<issue id="2024-35888" tracker="cve" />
<issue id="2024-35937" tracker="cve" />
<issue id="2024-35980" tracker="cve" />
<issue id="2024-36484" tracker="cve" />
<issue id="2024-36883" tracker="cve" />
<issue id="2024-36886" tracker="cve" />
<issue id="2024-36905" tracker="cve" />
<issue id="2024-36953" tracker="cve" />
<issue id="2024-36954" tracker="cve" />
<issue id="2024-38577" tracker="cve" />
<issue id="2024-38589" tracker="cve" />
<issue id="2024-38615" tracker="cve" />
<issue id="2024-40997" tracker="cve" />
<issue id="2024-41016" tracker="cve" />
<issue id="2024-41023" tracker="cve" />
<issue id="2024-41049" tracker="cve" />
<issue id="2024-42131" tracker="cve" />
<issue id="2024-43817" tracker="cve" />
<issue id="2024-43897" tracker="cve" />
<issue id="2024-44932" tracker="cve" />
<issue id="2024-44964" tracker="cve" />
<issue id="2024-44995" tracker="cve" />
<issue id="2024-46681" tracker="cve" />
<issue id="2024-46800" tracker="cve" />
<issue id="2024-46802" tracker="cve" />
<issue id="2024-46804" tracker="cve" />
<issue id="2024-46805" tracker="cve" />
<issue id="2024-46807" tracker="cve" />
<issue id="2024-46810" tracker="cve" />
<issue id="2024-46812" tracker="cve" />
<issue id="2024-46819" tracker="cve" />
<issue id="2024-46821" tracker="cve" />
<issue id="2024-46835" tracker="cve" />
<issue id="2024-46842" tracker="cve" />
<issue id="2024-46853" tracker="cve" />
<issue id="2024-46859" tracker="cve" />
<issue id="2024-46864" tracker="cve" />
<issue id="2024-46871" tracker="cve" />
<issue id="2024-47663" tracker="cve" />
<issue id="2024-47665" tracker="cve" />
<issue id="2024-47667" tracker="cve" />
<issue id="2024-47669" tracker="cve" />
<issue id="2024-47670" tracker="cve" />
<issue id="2024-47671" tracker="cve" />
<issue id="2024-47679" tracker="cve" />
<issue id="2024-47682" tracker="cve" />
<issue id="2024-47693" tracker="cve" />
<issue id="2024-47695" tracker="cve" />
<issue id="2024-47696" tracker="cve" />
<issue id="2024-47697" tracker="cve" />
<issue id="2024-47698" tracker="cve" />
<issue id="2024-47699" tracker="cve" />
<issue id="2024-47701" tracker="cve" />
<issue id="2024-47709" tracker="cve" />
<issue id="2024-47712" tracker="cve" />
<issue id="2024-47713" tracker="cve" />
<issue id="2024-47718" tracker="cve" />
<issue id="2024-47723" tracker="cve" />
<issue id="2024-47728" tracker="cve" />
<issue id="2024-47735" tracker="cve" />
<issue id="2024-47737" tracker="cve" />
<issue id="2024-47742" tracker="cve" />
<issue id="2024-47745" tracker="cve" />
<issue id="2024-47749" tracker="cve" />
<issue id="2024-47756" tracker="cve" />
<issue id="2024-47757" tracker="cve" />
<issue id="2024-49850" tracker="cve" />
<issue id="2024-49851" tracker="cve" />
<issue id="2024-49852" tracker="cve" />
<issue id="2024-49855" tracker="cve" />
<issue id="2024-49861" tracker="cve" />
<issue id="2024-49863" tracker="cve" />
<issue id="2024-49868" tracker="cve" />
<issue id="2024-49870" tracker="cve" />
<issue id="2024-49871" tracker="cve" />
<issue id="2024-49875" tracker="cve" />
<issue id="2024-49877" tracker="cve" />
<issue id="2024-49879" tracker="cve" />
<issue id="2024-49884" tracker="cve" />
<issue id="2024-49891" tracker="cve" />
<issue id="2024-49900" tracker="cve" />
<issue id="2024-49902" tracker="cve" />
<issue id="2024-49903" tracker="cve" />
<issue id="2024-49905" tracker="cve" />
<issue id="2024-49907" tracker="cve" />
<issue id="2024-49908" tracker="cve" />
<issue id="2024-49921" tracker="cve" />
<issue id="2024-49924" tracker="cve" />
<issue id="2024-49925" tracker="cve" />
<issue id="2024-49934" tracker="cve" />
<issue id="2024-49935" tracker="cve" />
<issue id="2024-49938" tracker="cve" />
<issue id="2024-49945" tracker="cve" />
<issue id="2024-49947" tracker="cve" />
<issue id="2024-49950" tracker="cve" />
<issue id="2024-49957" tracker="cve" />
<issue id="2024-49963" tracker="cve" />
<issue id="2024-49965" tracker="cve" />
<issue id="2024-49966" tracker="cve" />
<issue id="2024-49968" tracker="cve" />
<issue id="2024-49981" tracker="cve" />
<issue id="2024-49983" tracker="cve" />
<issue id="2024-49985" tracker="cve" />
<issue id="2024-49989" tracker="cve" />
<issue id="2024-50003" tracker="cve" />
<issue id="2024-50007" tracker="cve" />
<issue id="2024-50008" tracker="cve" />
<issue id="2024-50009" tracker="cve" />
<issue id="2024-50013" tracker="cve" />
<issue id="2024-50017" tracker="cve" />
<issue id="2024-50025" tracker="cve" />
<issue id="2024-50026" tracker="cve" />
<issue id="2024-50031" tracker="cve" />
<issue id="2024-50044" tracker="cve" />
<issue id="2024-50062" tracker="cve" />
<issue id="2024-50067" tracker="cve" />
<issue id="2024-50073" tracker="cve" />
<issue id="2024-50074" tracker="cve" />
<issue id="2024-50077" tracker="cve" />
<issue id="2024-50078" tracker="cve" />
<issue id="2024-50082" tracker="cve" />
<issue id="2024-50089" tracker="cve" />
<issue id="2024-50093" tracker="cve" />
<issue id="2024-50095" tracker="cve" />
<issue id="2024-50096" tracker="cve" />
<issue id="2024-50098" tracker="cve" />
<issue id="2024-50099" tracker="cve" />
<issue id="2024-50103" tracker="cve" />
<issue id="2024-50108" tracker="cve" />
<issue id="2024-50110" tracker="cve" />
<issue id="2024-50115" tracker="cve" />
<issue id="2024-50116" tracker="cve" />
<issue id="2024-50117" tracker="cve" />
<issue id="2024-50124" tracker="cve" />
<issue id="2024-50125" tracker="cve" />
<issue id="2024-50127" tracker="cve" />
<issue id="2024-50128" tracker="cve" />
<issue id="2024-50131" tracker="cve" />
<issue id="2024-50134" tracker="cve" />
<issue id="2024-50135" tracker="cve" />
<issue id="2024-50138" tracker="cve" />
<issue id="2024-50141" tracker="cve" />
<issue id="2024-50146" tracker="cve" />
<issue id="2024-50147" tracker="cve" />
<issue id="2024-50148" tracker="cve" />
<issue id="2024-50150" tracker="cve" />
<issue id="2024-50153" tracker="cve" />
<issue id="2024-50154" tracker="cve" />
<issue id="2024-50155" tracker="cve" />
<issue id="2024-50156" tracker="cve" />
<issue id="2024-50160" tracker="cve" />
<issue id="2024-50167" tracker="cve" />
<issue id="2024-50171" tracker="cve" />
<issue id="2024-50179" tracker="cve" />
<issue id="2024-50180" tracker="cve" />
<issue id="2024-50182" tracker="cve" />
<issue id="2024-50183" tracker="cve" />
<issue id="2024-50184" tracker="cve" />
<issue id="2024-50186" tracker="cve" />
<issue id="2024-50187" tracker="cve" />
<issue id="2024-50188" tracker="cve" />
<issue id="2024-50189" tracker="cve" />
<issue id="2024-50192" tracker="cve" />
<issue id="2024-50194" tracker="cve" />
<issue id="2024-50195" tracker="cve" />
<issue id="2024-50196" tracker="cve" />
<issue id="2024-50198" tracker="cve" />
<issue id="2024-50201" tracker="cve" />
<issue id="2024-50205" tracker="cve" />
<issue id="2024-50208" tracker="cve" />
<issue id="2024-50209" tracker="cve" />
<issue id="2024-50215" tracker="cve" />
<issue id="2024-50218" tracker="cve" />
<issue id="2024-50229" tracker="cve" />
<issue id="2024-50230" tracker="cve" />
<issue id="2024-50232" tracker="cve" />
<issue id="2024-50233" tracker="cve" />
<issue id="2024-50234" tracker="cve" />
<issue id="2024-50236" tracker="cve" />
<issue id="2024-50237" tracker="cve" />
<issue id="2024-50249" tracker="cve" />
<issue id="2024-50255" tracker="cve" />
<issue id="2024-50259" tracker="cve" />
<issue id="2024-50261" tracker="cve" />
<issue id="2024-50264" tracker="cve" />
<issue id="2024-50265" tracker="cve" />
<issue id="2024-50267" tracker="cve" />
<issue id="2024-50268" tracker="cve" />
<issue id="2024-50269" tracker="cve" />
<issue id="2024-50271" tracker="cve" />
<issue id="2024-50273" tracker="cve" />
<issue id="2024-50274" tracker="cve" />
<issue id="2024-50279" tracker="cve" />
<issue id="2024-50282" tracker="cve" />
<issue id="2024-50287" tracker="cve" />
<issue id="2024-50289" tracker="cve" />
<issue id="2024-50290" tracker="cve" />
<issue id="2024-50292" tracker="cve" />
<issue id="2024-50295" tracker="cve" />
<issue id="2024-50298" tracker="cve" />
<issue id="2024-50301" tracker="cve" />
<issue id="2024-50302" tracker="cve" />
<issue id="2024-53052" tracker="cve" />
<issue id="2024-53058" tracker="cve" />
<issue id="2024-53059" tracker="cve" />
<issue id="2024-53060" tracker="cve" />
<issue id="2024-53061" tracker="cve" />
<issue id="2024-53063" tracker="cve" />
<issue id="2024-53066" tracker="cve" />
<issue id="2024-53068" tracker="cve" />
<issue id="2024-53079" tracker="cve" />
<issue id="2024-53085" tracker="cve" />
<issue id="2024-53088" tracker="cve" />
<issue id="2024-53104" tracker="cve" />
<issue id="2024-53110" tracker="cve" />
<issue id="SES-1880" tracker="jsc" />
<issue id="PED-1166" tracker="jsc" />
<issue id="PED-1168" tracker="jsc" />
<issue id="PED-1170" tracker="jsc" />
<issue id="PED-1218" tracker="jsc" />
<issue id="PED-1220" tracker="jsc" />
<issue id="PED-1222" tracker="jsc" />
<issue id="PED-1223" tracker="jsc" />
<issue id="PED-1225" tracker="jsc" />
<issue id="PED-2849" tracker="jsc" />
<category>security</category>
<rating>important</rating>
<packager>olh</packager>
<reboot_needed/>
<description>
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
- CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
- CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
- CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
- CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
- CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
- CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
- CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
- CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
- CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
- CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
- CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
- CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
- CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
- CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
- CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
- CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
- CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
- CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
- CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
- CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
- CVE-2024-47701: ext4: explicitly exit when ext4_find_inline_entry returns an error (bsc#1231920).
- CVE-2024-47745: mm: split critical region in remap_file_pages() and invoke LSMs in between (bsc#1232135).
- CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
- CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
- CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
- CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
- CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
- CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
- CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
- CVE-2024-49968: ext4: fix error message when rejecting the default hash (bsc#1232264).
- CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).
- CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
- CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).
- CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
- CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).
- CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
- CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877).
- CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
- CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884).
- CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
- CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
- CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
- CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).
- CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905).
- CVE-2024-50134: drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape (bsc#1232890).
- CVE-2024-50135: nvme-pci: fix race condition between reset and nvme_dev_disable() (bsc#1232888).
- CVE-2024-50138: bpf: Use raw_spinlock_t in ringbuf (bsc#1232935).
- CVE-2024-50146: net/mlx5e: Do not call cleanup on profile rollback failure (bsc#1233056).
- CVE-2024-50147: net/mlx5: Fix command bitmask initialization (bsc#1233067).
- CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (bsc#1233061).
- CVE-2024-50154: tcp: Fix use-after-free of nreq in reqsk_timer_handler() (bsc#1233070).
- CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).
- CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057).
- CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129).
- CVE-2024-50184: virtio_pmem: Check device status before requesting flush (bsc#1233135).
- CVE-2024-50186: net: explicitly clear the sk pointer, when pf->create fails (bsc#1233110).
- CVE-2024-50188: net: phy: dp83869: fix memory corruption when enabling fiber (bsc#1233107).
- CVE-2024-50192: irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (bsc#1233106).
- CVE-2024-50195: posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (bsc#1233103).
- CVE-2024-50196: pinctrl: ocelot: fix system hang on level based interrupts (bsc#1233113).
- CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (bsc#1233293).
- CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233117).
- CVE-2024-50229: nilfs2: fix potential deadlock with newly created symlinks (bsc#1233205).
- CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (bsc#1233206).
- CVE-2024-50259: netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (bsc#1233214).
- CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (bsc#1233253).
- CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233453).
- CVE-2024-50267: USB: serial: io_edgeport: fix use after free in debug printk (bsc#1233456).
- CVE-2024-50271: signal: restore the override_rlimit logic (bsc#1233460).
- CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462).
- CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (bsc#1233463).
- CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
- CVE-2024-50289: media: av7110: fix a spectre vulnerability (bsc#1233478).
- CVE-2024-50295: net: arc: fix the device for dma_map_single/dma_unmap_single (bsc#1233484).
- CVE-2024-50298: net: enetc: allocate vf_state during PF probes (bsc#1233487).
- CVE-2024-53052: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (bsc#1233548).
- CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1233552).
- CVE-2024-53061: media: s5p-jpeg: prevent buffer overflows (bsc#1233555).
- CVE-2024-53063: media: dvbdev: prevent the risk of out of memory access (bsc#1233557).
- CVE-2024-53068: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (bsc#1233561).
- CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (bsc#1233570).
- CVE-2024-53088: i40e: fix race condition by adding filter's intermediate sync state (bsc#1233580).
- CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
- CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085).
The following non-security bugs were fixed:
- Drop OCFS2 patch causing a regression (bsc#1233255).
- Fix regression on AMDGPU driver (bsc#1233134).
- Removed the duplicated check of static_assert(sizeof(struct work_struct) >= sizeof(struct rcu_head)).
- Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (bsc#1234108).
- Revert "ixgbe: Manual AN-37 for troublesome link partners for X550 SFI" (git-fixes).
- Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (git-fixes).
- Revert "usb: gadget: composite: fix OS descriptors w_value logic" (git-fixes).
- Update config files (bsc#1218644).
- Update config files. Enabled IDPF for ARM64 (bsc#1221309)
- acpi: CPPC: Fix _CPC register setting issue (git-fixes).
- acpi: CPPC: Make rmw_lock a raw_spin_lock (git-fixes).
- acpi: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (stable-fixes).
- acpi: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (stable-fixes).
- ad7780: fix division by zero in ad7780_write_raw() (git-fixes).
- add bugreference to a hv_netvsc patch (bsc#1232413).
- alsa: 6fire: Release resources at card release (git-fixes).
- alsa: ac97: bus: Fix the mistake in the comment (git-fixes).
- alsa: caiaq: Use snd_card_free_when_closed() at disconnection (git-fixes).
- alsa: firewire-lib: fix return value on fail in amdtp_tscm_init() (git-fixes).
- alsa: hda/realtek - Fixed Clevo platform headset Mic issue (stable-fixes).
- alsa: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (stable-fixes).
- alsa: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (stable-fixes).
- alsa: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (stable-fixes).
- alsa: hda/realtek: Limit internal Mic boost on Dell platform (stable-fixes).
- alsa: hda/realtek: Update ALC225 depop procedure (git-fixes).
- alsa: hda/realtek: Update ALC256 depop procedure (git-fixes).
- alsa: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 (stable-fixes).
- alsa: us122l: Use snd_card_free_when_closed() at disconnection (git-fixes).
- alsa: usb-audio: Add quirk for HP 320 FHD Webcam (stable-fixes).
- alsa: usb-audio: Add quirks for Dell WD19 dock (stable-fixes).
- alsa: usx2y: Use snd_card_free_when_closed() at disconnection (git-fixes).
- amd-pstate: Set min_perf to nominal_perf for active mode performance gov (git-fixes).
- arm64/sve: Discard stale CPU state when handling SVE traps (git-fixes)
- arm64: Force position-independent veneers (git-fixes).
- arm64: dts: imx8mp: correct sdhc ipg clk (git-fixes).
- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (git-fixes)
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (git-fixes)
- arm64: smccc: replace custom COUNT_ARGS() & CONCATENATE() (git-fixes)
- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (git-fixes)
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian (git-fixes)
- asoc: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (git-fixes).
- asoc: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (git-fixes).
- asoc: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (stable-fixes).
- asoc: cs42l51: Fix some error handling paths in cs42l51_probe() (git-fixes).
- asoc: fsl_sai: Enable 'FIFO continue on error' FCONT bit (stable-fixes).
- asoc: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (stable-fixes).
- asoc: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (git-fixes).
- blk-throttle: Fix io statistics for cgroup v1 (bsc#1233528).
- block: Avoid leaking hctx->nr_active counter on batched completion (bsc#1231923).
- bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (git-fixes).
- bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (git-fixes).
- bnxt_en: Fix the PCI-AER routines (git-fixes).
- bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() (git-fixes).
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (git-fixes).
- bnxt_en: Reset PTP tx_avail after possible firmware reset (git-fixes).
- bnxt_en: Restore PTP tx_avail count in case of skb_pad() error (git-fixes).
- bnxt_en: Wait for FLR to complete during probe (git-fixes).
- bnxt_en: refactor reset close code (git-fixes).
- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (git-fixes).
- can: c_can: fix {rx,tx}_errors statistics (git-fixes).
- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (git-fixes).
- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).
- can: j1939: j1939_session_new(): fix skb reference counting (git-fixes).
- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).
- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (git-fixes).
- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (git-fixes).
- cgroup/bpf: only cgroup v2 can be attached by bpf programs (bsc#1234108).
- chtls: fix tp->rcv_tstamp initialization (git-fixes).
- comedi: Flush partial mappings in error case (git-fixes).
- crypto: bcm - add error check in the ahash_hmac_init function (git-fixes).
- crypto: caam - Fix the pointer passed to caam_qi_shutdown() (git-fixes).
- crypto: caam - add error check to caam_rsa_set_priv_key_form (git-fixes).
- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (git-fixes).
- crypto: cavium - Fix the if condition to exit loop after timeout (git-fixes).
- crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() (git-fixes).
- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (git-fixes).
- cxgb4: Properly lock TX queue for the selftest (git-fixes).
- cxgb4: add forgotten u64 ivlan cast before shift (git-fixes).
- cxgb4: unnecessary check for 0 in the free_sge_txq_uld() function (git-fixes).
- drivers: net: prevent tun_build_skb() to exceed the packet size limit (git-fixes).
- drm/amd: Fix initialization mistake for NBIO 7.7.0 (stable-fixes).
- drm/amdgpu: Adjust debugfs eviction and IB access permissions (stable-fixes).
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (stable-fixes).
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (git-fixes).
- drm/bridge: anx7625: Drop EDID cache on bridge power off (git-fixes).
- drm/bridge: tc358767: Fix link properties discovery (git-fixes).
- drm/bridge: tc358768: Fix DSI command tx (git-fixes).
- drm/etnaviv: Request pages from DMA32 zone on addressing_limited (git-fixes).
- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).
- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (git-fixes).
- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).
- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (git-fixes).
- drm/omap: Fix locking in omap_gem_new_dmabuf() (git-fixes).
- drm/omap: Fix possible NULL dereference (git-fixes).
- drm/panfrost: Remove unused id_mask from struct panfrost_model (git-fixes).
- drm/rockchip: vop: Fix a dereferenced before check warning (git-fixes).
- drm/sti: avoid potential dereference of error pointers (git-fixes).
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (git-fixes).
- drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (git-fixes).
- drm/v3d: Address race-condition in MMU flush (git-fixes).
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (stable-fixes).
- drm/vc4: hvs: Do not write gamma luts on 2711 (git-fixes).
- drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer (git-fixes).
- drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function (git-fixes).
- drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (stable-fixes).
- e1000e: Fix S0ix residency on corporate systems (git-fixes).
- efi/memattr: Ignore table if the size is clearly bogus (bsc#1231465).
- eth: bnxt: fix counting packets discarded due to OOM and netpoll (git-fixes).
- firmware: google: Unregister driver_info on failure (git-fixes).
- genirq/msi: Fix off-by-one error in msi_domain_alloc() (git-fixes).
- goldfish: Fix unused const variable 'goldfish_pipe_acpi_match' (git-fixes).
- gve: Fix XDP TX completion handling when counters overflow (git-fixes).
- gve: Fix an edge case for TSO skb validity check (git-fixes).
- gve: Fix skb truesize underestimation (git-fixes).
- gve: ignore nonrelevant GSO type bits when processing TSO headers (git-fixes).
- hid: core: zero-initialize the report buffer (git-fixes).
- hid: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (stable-fixes).
- hid: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (stable-fixes).
- hid: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (stable-fixes).
- hid: multitouch: Add support for B2402FVA track point (stable-fixes).
- hid: wacom: Defer calculation of resolution until resolution_code is known (git-fixes).
- hid: wacom: Interpret tilt data from Intuos Pro BT as signed values (git-fixes).
- hid: wacom: fix when get product name maybe null pointer (git-fixes).
- hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (git-fixes).
- hwmon: (tps23861) Fix reporting of negative temperatures (git-fixes).
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (git-fixes).
- i40e: Fix XDP program unloading while removing the driver (git-fixes).
- i40e: Fix filter input checks to prevent config with invalid values (git-fixes).
- i40e: Fix waiting for queues of all VSIs to be disabled (git-fixes).
- i40e: Report MFS in decimal base instead of hex (git-fixes).
- i40e: Restore VF MSI-X state during PCI reset (git-fixes).
- i40e: avoid double calling i40e_pf_rxq_wait() (git-fixes).
- i40e: disable NAPI right after disabling irqs when handling xsk_pool (git-fixes).
- i40e: fix use-after-free in i40e_aqc_add_filters() (git-fixes).
- i40e: take into account XDP Tx queues when stopping rings (git-fixes).
- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (git-fixes).
- iavf: Fix TC config comparison with existing adapter TC config (git-fixes).
- iavf: Fix promiscuous mode configuration flow messages (git-fixes).
- iavf: Introduce new state machines for flow director (git-fixes).
- iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set (git-fixes).
- iavf: fix FDIR rule fields masks validation (git-fixes).
- iavf: in iavf_down, disable queues when removing the driver (git-fixes).
- iavf: initialize waitqueues before starting watchdog_task (git-fixes).
- iavf: send VLAN offloading caps once after VFR (git-fixes).
- iavf: validate tx_coalesce_usecs even if rx_coalesce_usecs is zero (git-fixes).
- ibmvnic: Do partial reset on login failure (bsc#1233150).
- ibmvnic: Enforce stronger sanity checks on login response (bsc#1233150).
- ibmvnic: Ensure login failure recovery is safe from other resets (bsc#1233150).
- ibmvnic: Handle DMA unmapping of login buffs in release functions (bsc#1233150).
- ibmvnic: Unmap DMA login rsp buffer on send login fail (bsc#1233150).
- ice: Block switchdev mode when ADQ is active and vice versa (git-fixes).
- ice: Fix NULL pointer deref during VF reset (git-fixes).
- ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (git-fixes).
- ice: Fix link_down_on_close message (git-fixes).
- ice: Fix netif_is_ice() in Safe Mode (git-fixes).
- ice: Interpret .set_channels() input differently (git-fixes).
- ice: Shut down VSI with "link-down-on-close" enabled (git-fixes).
- ice: avoid executing commands on other ports when driving sync (git-fixes).
- ice: change q_index variable type to s16 to store -1 value (git-fixes).
- ice: fix ICE_LAST_OFFSET formula (git-fixes).
- ice: fix VLAN replay after reset (git-fixes).
- ice: fix accounting for filters shared by multiple VSIs (git-fixes).
- ice: fix accounting if a VLAN already exists (git-fixes).
- ice: fix over-shifted variable (git-fixes).
- ice: fix receive buffer size miscalculation (git-fixes).
- ice: ice_aq_check_events: fix off-by-one check when filling buffer (git-fixes).
- ice: reset first in crash dump kernels (git-fixes).
- ice: respect netif readiness in AF_XDP ZC related ndo's (git-fixes).
- ice: tc: allow zero flags in parsing tc flower (git-fixes).
- ice: virtchnl: stop pretending to support RSS over AQ or registers (git-fixes).
- idpf: Interpret .set_channels() input differently (git-fixes).
- idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (git-fixes).
- idpf: avoid compiler padding in virtchnl2_ptype struct (git-fixes).
- idpf: disable local BH when scheduling napi for marker packets (git-fixes).
- idpf: distinguish vports by the dev_port attribute (git-fixes).
- idpf: do not enable NAPI and interrupts prior to allocating Rx buffers (git-fixes).
- idpf: fix UAFs when destroying the queues (git-fixes).
- idpf: fix corrupted frames and skb leaks in singleq mode (git-fixes).
- idpf: fix memleak in vport interrupt configuration (git-fixes).
- idpf: fix memory leaks and crashes while performing a soft reset (git-fixes).
- igb: Always call igb_xdp_ring_update_tail() under Tx lock (git-fixes).
- igb: Fix missing time sync events (git-fixes).
- igb: Fix not clearing TimeSync interrupts for 82580 (git-fixes).
- igb: extend PTP timestamp adjustments to i211 (git-fixes).
- igc: Check VLAN EtherType mask (git-fixes).
- igc: Check VLAN TCI mask (git-fixes).
- igc: Fix hicredit calculation (git-fixes).
- igc: Fix missing time sync events (git-fixes).
- igc: Remove temporary workaround (git-fixes).
- igc: Report VLAN EtherType matching back to user (git-fixes).
- igc: Unlock on error in igc_io_resume() (git-fixes).
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (git-fixes).
- iio: adc: ad7606: Fix typo in the driver name (git-fixes).
- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (git-fixes).
- iio: light: al3010: Fix an error handling path in al3010_probe() (git-fixes).
- iio: light: veml6030: fix microlux value calculation (git-fixes).
- initramfs: avoid filename buffer overrun (bsc#1232436).
- input: i8042 - add Ayaneo Kun to i8042 quirk table (git-fixes).
- input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table (git-fixes).
- input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (git-fixes).
- input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (git-fixes).
- input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (git-fixes).
- irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (git-fixes).
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (git-fixes).
- ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() (git-fixes).
- ixgbe: fix crash with empty VF macvlan list (git-fixes).
- ixgbe: fix timestamp configuration code (git-fixes).
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able (git-fixes).
- kABI: Restore exported __arm_smccc_sve_check (git-fixes)
- kernel-binary: Enable livepatch package only when livepatch is enabled Otherwise the filelist may be empty failing the build (bsc#1218644).
- kernel.h: split out COUNT_ARGS() and CONCATENATE() to args.h (git-fixes)
- kexec: fix a memory leak in crash_shrink_memory() (git-fixes).
- kvm: PPC: Book3S HV: remove unused varible (bsc#1194869).
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (git-fixes).
- media: adv7604: prevent underflow condition when reporting colorspace (git-fixes).
- media: cx24116: prevent overflows on SNR calculus (git-fixes).
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (stable-fixes).
- media: dvb-usb-v2: af9035: fix missing unlock (git-fixes).
- media: dvb_frontend: do not play tricks with underflow values (git-fixes).
- media: dvbdev: prevent the risk of out of memory access (git-fixes).
- media: pci: cx23885: check cx23885_vdev_init() return (stable-fixes).
- media: pulse8-cec: fix data timestamp at pulse8_setup() (git-fixes).
- media: stb0899_algo: initialize cfr before using it (git-fixes).
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (git-fixes).
- media: v4l2-tpg: prevent the risk of a division by zero (git-fixes).
- mei: use kvmalloc for read buffer (git-fixes).
- misc: apds990x: Fix missing pm_runtime_disable() (git-fixes).
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (bsc#1234012).
- mm/memory: add non-anonymous page check in the copy_present_page() (bsc#1231646).
- modpost: remove incorrect code in do_eisa_entry() (git-fixes).
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements (git-fixes).
- net/mlx5: Added cond_resched() to crdump collection (git-fixes).
- net/mlx5: Allow 0 for total host VFs (git-fixes).
- net/mlx5: Correctly compare pkt reformat ids (git-fixes).
- net/mlx5: DR, Can't go to uplink vport on RX rule (git-fixes).
- net/mlx5: DR, Use the right GVMI number for drop action (git-fixes).
- net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (git-fixes).
- net/mlx5: Drain health before unregistering devlink (git-fixes).
- net/mlx5: E-switch, register event handler before arming the event (git-fixes).
- net/mlx5: Explicitly set scheduling element and TSAR type (git-fixes).
- net/mlx5: Fix fw tracer first block check (git-fixes).
- net/mlx5: Handle fw tracer change ownership event based on MTRC (git-fixes).
- net/mlx5: LAG, Check correct bucket when modifying LAG (git-fixes).
- net/mlx5: Lag, do bond only if slaves agree on roce state (git-fixes).
- net/mlx5: Lag, do not use the hardcoded value of the first port (git-fixes).
- net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (git-fixes).
- net/mlx5: Skip clock update work when device is in error state (git-fixes).
- net/mlx5: Unregister notifier on eswitch init failure (git-fixes).
- net/mlx5: Update the list of the PCI supported devices (git-fixes).
- net/mlx5: Use RMW accessors for changing LNKCTL (git-fixes).
- net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (git-fixes).
- net/mlx5: Use recovery timeout on sync reset flow (git-fixes).
- net/mlx5: fix potential memory leak in mlx5e_init_rep_rx (git-fixes).
- net/mlx5: fs, lock FTE when checking if active (git-fixes).
- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (git-fixes).
- net/mlx5e: Add missing link modes to ptys2ethtool_map (git-fixes).
- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (git-fixes).
- net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp (git-fixes).
- net/mlx5e: Allow software parsing when IPsec crypto is enabled (git-fixes).
- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (git-fixes).
- net/mlx5e: Change the warning when ignore_flow_level is not supported (git-fixes).
- net/mlx5e: Check return value of snprintf writing to fw_version buffer (git-fixes).
- net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors (git-fixes).
- net/mlx5e: Correct snprintf truncation handling for fw_version buffer (git-fixes).
- net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors (git-fixes).
- net/mlx5e: Correctly report errors for ethtool rx flows (git-fixes).
- net/mlx5e: Do not offload internal port if filter device is out device (git-fixes).
- net/mlx5e: Fix IPsec tunnel mode offload feature check (git-fixes).
- net/mlx5e: Fix UDP GSO for encapsulated packets (git-fixes).
- net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set (git-fixes).
- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (git-fixes).
- net/mlx5e: Fix pedit endianness (git-fixes).
- net/mlx5e: Fix possible deadlock on mlx5e_tx_timeout_work (git-fixes).
- net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() (git-fixes).
- net/mlx5e: HTB, Fix inconsistencies with QoS SQs number (git-fixes).
- net/mlx5e: Move representor neigh cleanup to profile cleanup_tx (git-fixes).
- net/mlx5e: Reduce the size of icosq_str (git-fixes).
- net/mlx5e: Take state lock during tx timeout reporter (git-fixes).
- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (git-fixes).
- net/mlx5e: fix a potential double-free in fs_udp_create_groups (git-fixes).
- net/mlx5e: fix double free in macsec_fs_tx_create_crypto_table_groups (git-fixes).
- net/mlx5e: fix double free of encap_header (git-fixes).
- net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (git-fixes).
- net/mlx5e: kTLS, Fix incorrect page refcounting (git-fixes).
- net: ena: Fix potential sign extension issue (git-fixes).
- net: ena: Remove ena_select_queue (git-fixes).
- net: ena: Wrong missing IO completions check order (git-fixes).
- net: qede: use return from qede_parse_flow_attr() for flow_spec (git-fixes).
- net: relax socket state check at accept time (git-fixes).
- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (git-fixes).
- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (git-fixes).
- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (stable-fixes).
- net: usb: usbnet: fix race in probe failure (git-fixes).
- nfs: Fix KMSAN warning in decode_getfattr_attrs() (git-fixes).
- nvme-fabrics: fix kernel crash while shutting down controller (git-fixes).
- nvme-pci: fix freeing of the HMB descriptor table (git-fixes).
- nvme-pci: reverse request order in nvme_queue_rqs (git-fixes).
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (git-fixes).
- pci: Add T_PVPERL macro (git-fixes).
- pci: Fix reset_method_store() memory leak (git-fixes).
- pci: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf() (git-fixes).
- pci: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (git-fixes).
- pci: keystone: Add link up check to ks_pcie_other_map_bus() (git-fixes).
- pci: keystone: Set mode as Root Complex for "ti,keystone-pcie" compatible (git-fixes).
- pci: rockchip-ep: Fix address translation unit programming (git-fixes).
- phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes).
- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (git-fixes).
- platform/surface: aggregator: Fix warning when controller is destroyed in probe (git-fixes).
- platform/x86: dell-sysman: add support for alienware products (stable-fixes).
- platform/x86: dell-wmi: Ignore suspend notifications (stable-fixes).
- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (bsc#1234098).
- power: supply: bq27xxx: Fix registers of bq27426 (git-fixes).
- power: supply: core: Remove might_sleep() from power_supply_put() (git-fixes).
- powerpc/asm: Remove UPD_CONSTR after GCC 4.9 removal (bsc#1194869).
- powerpc/atomic: Use YZ constraints for DS-form instructions (bsc#1194869).
- powerpc/kexec: Fix return of uninitialized variable (bsc#1194869).
- powerpc/mm/fault: Fix kfence page fault reporting (bsc#1194869).
- powerpc/mm: Fix boot crash with FLATMEM (bsc#1194869).
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (bsc#1194869).
- powerpc/powernv: Free name on error in opal_event_init() (bsc#1194869).
- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (bsc#1194869).
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (bsc#1194869).
- powerpc: remove GCC version check for UPD_CONSTR (bsc#1194869).
- qed: avoid truncating work queue length (git-fixes).
- rdma/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (git-fixes)
- rdma/hns: Add clear_hem return value to log (git-fixes)
- rdma/hns: Add mutex_destroy() (git-fixes)
- rdma/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (git-fixes)
- rdma/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci (git-fixes)
- rdma/hns: Fix cpu stuck caused by printings during reset (git-fixes)
- rdma/hns: Fix different dgids mapping to the same dip_idx (git-fixes)
- rdma/hns: Fix flush cqe error when racing with destroy qp (git-fixes)
- rdma/hns: Fix out-of-order issue of requester when setting FENCE (git-fixes)
- rdma/hns: Remove unnecessary QP type checks (git-fixes)
- rdma/hns: Use dev_* printings in hem code instead of ibdev_* (git-fixes)
- rdma/hns: Use macro instead of magic number (git-fixes)
- rdma/mlx5: Move events notifier registration to be after device registration (git-fixes)
- rdma/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled (git-fixes).
- rdma/rxe: Fix the qp flush warnings in req (git-fixes)
- rdma/rxe: Set queue pair cur_qp_state when being queried (git-fixes)
- rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644)
- rtc: ab-eoz9: do not fail temperature reads on undervoltage notification (git-fixes).
- rtc: abx80x: Fix WDT bit position of the status register (git-fixes).
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (git-fixes).
- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).
- scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (bsc#1233241).
- scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (bsc#1233241).
- scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (bsc#1233241).
- scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (bsc#1233241).
- scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (bsc#1233241).
- scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241).
- scsi: lpfc: Modify CGN warning signal calculation based on EDC response (bsc#1233241).
- scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (bsc#1233241).
- scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (bsc#1233241).
- scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241).
- scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (bsc#1233241).
- scsi: scsi_transport_fc: Allow setting rport state to current state (git-fixes).
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (git-fixes).
- security/keys: fix slab-out-of-bounds in key_task_permission (git-fixes).
- serial: 8250: omap: Move pm_runtime_get_sync (git-fixes).
- sfc: Check firmware supports Ethernet PTP filter (git-fixes).
- sfc: do not unregister flow_indr if it was never registered (git-fixes).
- sfc: fix a double-free bug in efx_probe_filters (git-fixes).
- signal: Replace BUG_ON()s (bsc#1234093).
- spi: Fix acpi deferred irq probe (git-fixes).
- spi: atmel-quadspi: Fix register name in verbose logging function (git-fixes).
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (git-fixes).
- thermal: core: Initialize thermal zones before registering them (git-fixes).
- thermal: intel: int340x: processor: Fix warning during module unload (git-fixes).
- tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1082555 git-fixes).
- tun: Fix xdp_rxq_info's queue_index when detaching (git-fixes).
- tun: prevent negative ifindex (git-fixes).
- ucounts: fix counter leak in inc_rlimit_get_ucounts() (bsc#1233460).
- usb: chaoskey: Fix possible deadlock chaoskey_list_lock (git-fixes).
- usb: chaoskey: fail open after removal (git-fixes).
- usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (git-fixes).
- usb: dwc3: gadget: Fix checking for number of TRBs left (git-fixes).
- usb: dwc3: gadget: Fix looping of queued SG entries (git-fixes).
- usb: ehci-spear: fix call balance of sehci clk handling routines (git-fixes).
- usb: musb: sunxi: Fix accessing an released usb phy (git-fixes).
- usb: phy: Fix API devm_usb_put_phy() can not release the phy (git-fixes).
- usb: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (git-fixes).
- usb: serial: io_edgeport: fix use after free in debug printk (git-fixes).
- usb: serial: option: add Fibocom FG132 0x0112 composition (stable-fixes).
- usb: serial: option: add Quectel RG650V (stable-fixes).
- usb: serial: qcserial: add support for Sierra Wireless EM86xx (stable-fixes).
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (git-fixes).
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (git-fixes).
- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (git-fixes).
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue (git-fixes).
- usb: yurex: make waiting on yurex_write interruptible (git-fixes).
- usbip: tools: Fix detach_port() invalid port error path (git-fixes).
- vdpa/mlx5: preserve CVQ vringh index (git-fixes).
- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (git-fixes).
- watchdog: rti: of: honor timeout-sec property (git-fixes).
- wifi: ath10k: Fix memory leak in management tx (git-fixes).
- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (git-fixes).
- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (git-fixes).
- wifi: ath11k: Fix invalid ring usage in full monitor mode (git-fixes).
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (git-fixes).
- wifi: brcm80211: BRCM_TRACING should depend on TRACING (git-fixes).
- wifi: iwlegacy: Clear stale interrupts before resuming device (stable-fixes).
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (git-fixes).
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (stable-fixes).
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (git-fixes).
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (git-fixes).
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (git-fixes).
- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).
- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).
- x86/kvm: fix is_stale_page_fault() (bsc#1221333).
- xhci: Fix Link TRB DMA in command ring stopped completion event (git-fixes).
- xhci: Separate PORT and CAPs macros into dedicated file (stable-fixes).
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems (git-fixes).
</description>
<summary>Security update for the Linux Kernel</summary>
</patchinfo>
