Continuous stable update tracker for Tumbleweed [trackerbug] 4.12 powerpc base kernel fixes SLE15 TPM base kernel fixes [TRACKERBUG] 5.14 powerpc base kernel fixes [trackerbug] 6.4 powerpc base kernel fixes VUL-0: kernel: SLAM - Spectre based on Linear Address Masking VUL-0: CVE-2023-6270: kernel: use-after-free vulnerability in ATA over Ethernet (AoE) driver kernel/livepatching: Add klp-convert dm-raid/md/raid: regression related to dm-raid456 IO concurrent with reshape Lenovo Yoga 14APH8 headphones jack requires bass speaker to be full volume VUL-0: CVE-2024-26596: kernel: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events L3-Question: x86/mm/ident_map: Use gbpages only where full GB page should be mapped. Enable IDPF driver for arm64 VUL-0: CVE-2024-26703: kernel: tracing/timerlat: Move hrtimer_init to timerlat_fd open() VUL-0: CVE-2024-26741: kernel: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished(). VUL-0: CVE-2024-26782: kernel: mptcp: fix double-free on socket dismantle VUL-0: CVE-2024-26864: kernel: tcp: refcnt handling bug in __inet_hash_connect(). VUL-0: CVE-2024-26923: kernel: af_unix: fix garbage collector racing against connect() VUL-0: CVE-2024-26953: kernel: net: esp: fix bad handling of pages from page_pool VUL-0: CVE-2024-27026: kernel: vmxnet3: Fix missing reserved tailroom VUL-0: CVE-2024-27017: kernel: netfilter: nft_set_pipapo: walk over current view on netlink dump VUL-0: CVE-2024-27043: kernel: media: media: dvbdev: use-after-free in different places KVM passthrough disks are detected as 0 byte disks on guest [HPS Bug] SLES15SP6 - multiple occurrences of watchdog: BUG: soft lockup during iterated reboot test VUL-0: CVE-2024-27407: kernel: fs/ntfs3: Fixed overflow check in mi_enum_attr() VUL-0: CVE-2024-35888: kernel: erspan: make sure erspan_base_hdr is present in skb->head VUL-0: CVE-2024-36000: kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge VUL-0: CVE-2024-35980: kernel: arm64: tlb: Fix TLBI RANGE operand VUL-0: CVE-2023-52778: kernel: mptcp: deal with large GSO size VUL-0: CVE-2023-52881: kernel: tcp: do not accept ACK of bytes we never sent VUL-0: CVE-2024-36031: kernel: keys: Fix overwrite of key expiration on instantiation VUL-0: CVE-2024-36883: kernel: net: fix out-of-bounds access in ops_init VUL-0: CVE-2024-36886: kernel: tipc: fix UAF in error path VUL-0: CVE-2024-36905: kernel: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets VUL-0: CVE-2024-36954: kernel: tipc: fix a possible memleak in tipc_buf_append VUL-0: CVE-2024-36920: kernel: scsi: mpi3mr: avoid memcpy field-spanning write WARNING VUL-0: CVE-2024-36927: kernel: ipv4: Fix uninit-value access in __ip_make_skb() bpf: backport of iterator and callback handling fixes Xen refuses to boot in AMD Ryzen Pro system - ref:_00D1igLOd._500Tr64Tw1:ref VUL-0: CVE-2024-36968: kernel: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() vmxnet3: update to latest ToT VUL-0: CVE-2024-38576: kernel: rcu: fix buffer overflow in print_cpu_stall_info() VUL-0: CVE-2024-38577: kernel: rcu-tasks: fix show_rcu_tasks_trace_gp_kthread buffer overflow VUL-0: CVE-2024-38589: kernel: netrom: fix possible dead-lock in nr_rt_ioctl() VUL-0: CVE-2024-36244: kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too VUL-0: CVE-2024-38599: kernel: jffs2: prevent xattr node from overflowing the eraseblock VUL-0: CVE-2024-36484: kernel: net: relax socket state check at accept time. NFS 4.0 Server generating NFS4ERR_BAD_SEQID on lock attempts VUL-0: CVE-2024-40914: kernel: mm/huge_memory: don't unpoison huge_zero_folio lpfc - Boot failed after installation of kernel-default-5.14.21-150500.55.68.1 [NetApp SLES15 SP6 Bug]: NVMe device inconsistency seen during repeated old NS unmap & new NS map using reused NSID Internal microphone not working on Lenovo Thinkpad E16 Gen 2 (Model 21M5) VUL-0: CVE-2024-41016: kernel: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() VUL-0: CVE-2024-41023: kernel: sched/deadline: fix task_struct reference leak VUL-0: CVE-2024-41031: kernel: mm/filemap: skip to create PMD-sized page cache if needed VUL-0: CVE-2024-41047: kernel: i40e: Fix XDP program unloading while removing the driver VUL-0: CVE-2024-41082: kernel: nvme-fabrics: use reserved tag for reg read/write command VUL-0: CVE-2024-42145: kernel: IB/core: implement a limit on UMAD receive List Server loses primary network and leaves core dump qla2xxx: update driver to 10.02.09.300-k Update Broadcom Emulex lpfc driver to 14.4.0.3 KVM:Starting KVM error "ensure all devices within the iommu_group are bound to their vfio bus driver" after kernel update SLES15 SP6 showed CXL related complaining messages when CXL capable root port did not attach CXL device Update Broadcom Emulex lpfc driver for SLES15 SP7 to 14.4.0.4 libbpf: failed to find '.BTF' ELF section in vmlinux Crash due to invalid per cpu cache freelist SLES15SP6: Authentication fails for nvme splitter drive while performing "nvme sed revert" operation with changed password on SLES15SP6 (nvme/splitter/SED/SLES15SP6/P10) mana: Fix race of mana_hwc_post_rx_wqe and new hwc response VUL-0: CVE-2024-44932: kernel: idpf: fix UAFs when destroying the queues mana: Implement get_ringparam/set_ringparam for mana UCS fw upgrade - half of 15sp5 servers lost all paths (fnic 1.6.0.55) while servers with older fnic driver are ok Intermittent sound Lenovo Legion Pro 7 16IRX8H (Intel CPU) VUL-0: CVE-2024-44958: kernel: sched/smt: Fix unbalance sched_smt_present dec/inc VUL-0: CVE-2024-44964: kernel: idpf: fix memory leaks and crashes while performing a soft reset VUL-0: CVE-2024-44995: kernel: net: hns3: fix a deadlock problem when config TC during resetting mana: Improve mana_set_channels() in low mem conditions SLES15 SP6 - [P10][DD2.0][SHARED] - Hard lockups and Soft lockups are seen and LPAR hangs while running stress-ng (queued_spin_lock) VUL-0: CVE-2024-26767: kernel: drm/amd/display: fixed integer types and null check locations VUL-0: CVE-2024-26758: kernel: md: Don't ignore suspended array in md_check_recovery() VUL-0: CVE-2024-26761: kernel: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window kernel: reproducible builds issue with BTF VUL-0: CVE-2024-45016: kernel: netem: fix return value if duplicate enqueue fails VUL-0: CVE-2024-45025: kernel: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE SLES 15 SP6: On P10, IPSec crypto using rfc4106(aes_gcm_p10) caused file moved to dst side checksum mis-match with the original file on src side. VUL-0: CVE-2024-26943: kernel: nouveau/dmem: handle kcalloc() allocation failure VUL-0: CVE-2024-46678: kernel: bonding: change ipsec_lock from spin lock to mutex VUL-0: CVE-2024-46680: kernel: Bluetooth: btnxpuart: Fix random crash seen while removing driver VUL-0: CVE-2024-46681: kernel: pktgen: use cpus_read_lock() in pg_net_init() VUL-0: CVE-2023-52800: kernel: wifi: ath11k: fix htt pktlog locking VUL-0: CVE-2023-52766: kernel: i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler VUL-0: CVE-2024-46721: kernel: apparmor: fix possible NULL pointer dereference SLE-15SP5 KOTD: NFS v4.0 lock test fails with EIO and EACCES on aarch64 VUL-0: CVE-2024-46766: kernel: ice: move netif_queue_set_napi to rtnl-protected sections VUL-0: CVE-2024-46770: kernel: ice: Add netif_device_attach/detach into PF reset flow VUL-0: CVE-2024-46777: kernel: udf: Avoid excessive partition lengths VUL-0: CVE-2024-46775: kernel: drm/amd/display: Validate function returns VUL-0: CVE-2024-46754: kernel: bpf: Remove tst_run from lwt_seg6local_prog_ops. VUL-0: CVE-2024-46765: kernel: ice: protect XDP configuration with a mutex VUL-0: CVE-2024-46788: kernel: tracing/osnoise: Use a cpumask to know what threads are kthreads VUL-0: CVE-2024-46800: kernel: sch/netem: fix use after free in netem_dequeue VUL-0: CVE-2024-46797: kernel: powerpc/qspinlock: Fix deadlock in MCS queue NFSv2 support silently dropped Network Failure when Transferring Data leads to Kernel Oops live migration frequently failed due to "unable to execute QEMU command 'cont': Failed to get "write" lock" Intermittent nfs mount failures (may be due to SUNRPC over UDP) SLES 15 SP6 - inkernel crypto xctr(aes) alg: skcipher: failed to allocate transform for ctr(aes): -2 VUL-0: CVE-2024-46848: kernel: perf/x86/intel: Limit the period on Haswell VUL-0: CVE-2024-46849: kernel: ASoC: meson: axg-card: fix 'use-after-free' VUL-0: CVE-2024-46846: kernel: spi: rockchip: Resolve unbalanced runtime PM / system PM handling VUL-0: CVE-2024-46845: kernel: tracing/timerlat: Only clear timer if a kthread exists VUL-0: CVE-2024-46851: kernel: drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct() VUL-0: CVE-2024-46852: kernel: dma-buf: heaps: Fix off-by-one in CMA heap fault handler VUL-0: CVE-2024-46853: kernel: spi: nxp-fspi: fix the KASAN report out-of-bounds bug VUL-0: CVE-2024-46854: kernel: net: dpaa: Pad packets to ETH_ZLEN VUL-0: CVE-2024-46855: kernel: netfilter: nft_socket: fix sk refcount leaks VUL-0: CVE-2024-46857: kernel: net/mlx5: Fix bridge mode operations when there are no VFs VUL-0: CVE-2024-46859: kernel: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses VUL-0: CVE-2024-46836: kernel: usb: gadget: aspeed_udc: validate endpoint index for ast udc VUL-0: CVE-2024-46860: kernel: wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change VUL-0: CVE-2024-46841: kernel: btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() VUL-0: CVE-2024-46834: kernel: ethtool: fail closed if we can't get max channel used in indirection tables VUL-0: CVE-2024-46835: kernel: drm/amdgpu: Fix smatch static checker warning VUL-0: CVE-2024-46843: kernel: scsi: ufs: core: Remove SCSI host only if added VUL-0: CVE-2024-46842: kernel: scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info VUL-0: CVE-2024-46861: kernel: usbnet: ipheth: do not stop RX on failing RX callback VUL-0: CVE-2024-46840: kernel: btrfs: clean up our handling of refs == 0 in snapshot delete VUL-0: CVE-2024-46864: kernel: x86/hyperv: fix kexec crash due to VP assist page corruption VUL-0: CVE-2024-46802: kernel: drm/amd/display: added NULL check at start of dc_validate_stream VUL-0: CVE-2024-46828: kernel: sched: sch_cake: fix bulk flow accounting logic for host fairness VUL-0: CVE-2024-46826: kernel: ELF: fix kernel.randomize_va_space double read VUL-0: CVE-2024-46830: kernel: KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS VUL-0: CVE-2024-46831: kernel: net: microchip: vcap: Fix use-after-free error in kunit test VUL-0: CVE-2024-46803: kernel: drm/amdkfd: Check debug trap enable before write dbg_ev_file VUL-0: CVE-2024-46804: kernel: drm/amd/display: Add array index check for hdcp ddc access VUL-0: CVE-2024-46805: kernel: drm/amdgpu: fix the waring dereferencing hive VUL-0: CVE-2024-46806: kernel: drm/amdgpu: Fix the warning division or modulo by zero VUL-0: CVE-2024-46807: kernel: drm/amd/amdgpu: Check tbo resource pointer VUL-0: CVE-2024-46809: kernel: drm/amd/display: Check BIOS images before it is used VUL-0: CVE-2024-46821: kernel: drm/amd/pm: Fix negative array index read VUL-0: CVE-2024-46825: kernel: wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check VUL-0: CVE-2024-46827: kernel: wifi: ath12k: fix firmware crash due to invalid peer nss VUL-0: CVE-2024-46810: kernel: drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ VUL-0: CVE-2024-46811: kernel: drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box ceph: remove the incorrect Fw reference check when dirtying pages cachefiles: fix dentry leak in cachefiles_open_file() VUL-0: CVE-2024-46812: kernel: drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration VUL-0: CVE-2024-46813: kernel: drm/amd/display: check link_index before accessing dc->links[] VUL-0: CVE-2024-46814: kernel: drm/amd/display: check msg_id before processing transcation VUL-0: CVE-2024-46815: kernel: drm/amd/display: check num_valid_sets before accessing reader_wm_sets[] VUL-0: CVE-2024-46816: kernel: drm/amd/display: stop amdgpu_dm initialize when link nums greater than max_links VUL-0: CVE-2024-46817: kernel: drm/amd/display: stop amdgpu_dm initialize when stream nums greater than 6 VUL-0: CVE-2024-46819: kernel: drm/amdgpu: the warning dereferencing obj for nbio_v7_4 VUL-0: CVE-2024-46818: kernel: drm/amd/display: check gpio_id before used as array index KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query kernel shown as unreleased ceph: fix cap ref leak via netfs init_request VUL-0: CVE-2024-46871: kernel: drm/amd/display: correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX VUL-0: CVE-2024-46870: kernel: drm/amd/display: disable DMCUB timeout for DCN35 VUL-0: CVE-2024-47658: kernel: crypto: stm32/cryp - call finalize with bh disabled VUL-0: CVE-2024-47660: kernel: fsnotify: clear PARENT_WATCHED flags lazily VUL-0: CVE-2024-47662: kernel: drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection VUL-0: CVE-2024-47663: kernel: staging: iio: frequency: ad9834: validate frequency parameter value VUL-0: CVE-2024-47664: kernel: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware VUL-0: CVE-2024-47665: kernel: i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup VUL-0: CVE-2024-47666: kernel: scsi: pm80xx: Set phy->enable_completion only when we wait for it Kernel 6.11.2-1 only a fraction of ram is available VUL-0: CVE-2024-47669: kernel: nilfs2: fix state management in error path of log writing function VUL-0: CVE-2024-47667: kernel: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) VUL-0: CVE-2024-47661: kernel: drm/amd/display: avoid overflow from uint32_t to uint8_t VUL-0: CVE-2024-47668: kernel: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() VUL-0: CVE-2024-47670: kernel: ocfs2: add bounds checking to ocfs2_xattr_find_entry() VUL-0: CVE-2024-47673: kernel: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped VUL-0: CVE-2024-47672: kernel: wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead VUL-0: CVE-2024-47671: kernel: USB: usbtmc: prevent kernel-usb-infoleak [sles-15-sp6][maintenance update] [fio-Sequential] nfsv4 server got 'crash' when execute re-read cases on xfs Partner-L3: [Intel] Virtualization regression during PBOffline test with ESXi Host and SUSE SLES15 SP6 Guest ext4: fix possible tid_t sequence overflows ext4: don't track ranges in fast_commit if inode has inlined data ext4: fix fast commit inode enqueueing during a full journal commit ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit ext4: use handle to mark fc as ineligible in __track_dentry_update() ext4: mark fc as ineligible using an handle in ext4_xattr_set() VUL-0: CVE-2024-47674: kernel: mm: avoid leaving partial pfn mappings around in error case [VT] xen throw crash during reboot VUL-0: CVE-2023-52917: kernel: ntb: intel: fix the NULL vs IS_ERR() bug for debugfs_create_dir() VUL-0: CVE-2024-47681: kernel: wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he VUL-0: CVE-2024-47682: kernel: scsi: sd: fix off-by-one error in sd_read_block_characteristics() VUL-0: CVE-2024-47692: kernel: nfsd: return -EINVAL when namelen is 0 VUL-0: CVE-2024-47697: kernel: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error VUL-0: CVE-2024-47698: kernel: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error VUL-0: CVE-2024-47715: kernel: wifi: mt76: mt7915: fix oops on non-dbdc mt7986 VUL-0: CVE-2024-49860: kernel: ACPI: sysfs: validate return type of _STR method VUL-0: CVE-2024-47696: kernel: RDMA/iwcm: fix WARNING:at_kernel/workqueue.c:#check_flush_dependency VUL-0: CVE-2024-47719: kernel: iommufd: protect against overflow of ALIGN() during iova allocation VUL-0: CVE-2024-47753: kernel: media: mediatek: vcodec: fix VP8 stateless decoder smatch warning VUL-0: CVE-2024-47741: kernel: btrfs: fix race setting file private on concurrent lseek using same fd VUL-0: CVE-2024-49862: kernel: powercap: intel_rapl: fix off by one in get_rpi() VUL-0: CVE-2024-47705: kernel: block: fix potential invalid pointer dereference in blk_add_partition VUL-0: CVE-2024-50064: kernel: zram: free secondary algorithms names VUL-0: CVE-2024-50046: kernel: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() VUL-0: CVE-2024-50045: kernel: netfilter: br_netfilter: fix panic with metadata_dst skb VUL-0: CVE-2024-50044: kernel: Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change VUL-0: CVE-2024-50042: kernel: ice: Fix increasing MSI-X on VF VUL-0: CVE-2024-50041: kernel: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash VUL-0: CVE-2024-50040: kernel: igb: Do not bring the device up after non-fatal error VUL-0: CVE-2024-50033: kernel: slip: make slhc_remember() more robust against malicious packets VUL-0: CVE-2024-47699: kernel: nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() VUL-0: CVE-2024-47701: kernel: ext4: avoid OOB when system.data xattr changes underneath the filesystem VUL-0: CVE-2024-47702: kernel: bpf: fail verification for sign-extension of packet data/data_end/data_meta VUL-0: CVE-2024-47675: kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() VUL-0: CVE-2024-47679: kernel: vfs: fix race between evice_inodes() and find_inode()&iput() VUL-0: CVE-2024-47695: kernel: RDMA/rtrs-clt: reset cid to con_num - 1 to stay in bounds VUL-0: CVE-2024-47707: kernel: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() VUL-0: CVE-2024-47706: kernel: block, bfq: fix possible UAF for bfqq->bic with merge chain VUL-0: CVE-2024-47704: kernel: drm/amd/display: check link_res->hpo_dp_link_enc before using it VUL-0: CVE-2024-47703: kernel: bpf, lsm: add check for BPF LSM return value VUL-0: CVE-2024-50031: kernel: drm/v3d: Stop the active perfmon before being destroyed VUL-0: CVE-2024-50028: kernel: thermal: core: Reference count the zone in thermal_zone_get_by_id() VUL-0: CVE-2024-50027: kernel: thermal: core: Free tzp copy along with the thermal zone VUL-0: CVE-2024-50026: kernel: scsi: wd33c93: Don't use stale scsi_pointer value VUL-0: CVE-2024-50025: kernel: scsi: fnic: Move flush_work initialization out of if block VUL-0: CVE-2024-50024: kernel: net: Fix an unsafe loop on the list VUL-0: CVE-2024-50023: kernel: net: phy: Remove LED entry from LEDs list on unregister VUL-0: CVE-2024-50022: kernel: device-dax: correct pgoff align in dax_set_mapping() VUL-0: CVE-2024-50021: kernel: ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() VUL-0: CVE-2024-49917: kernel: drm/amd/display: add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw VUL-0: CVE-2024-49918: kernel: drm/amd/display: add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer VUL-0: CVE-2024-49919: kernel: drm/amd/display: add null check for head_pipe in dcn201_acquire_free_pipe_for_layer VUL-0: CVE-2024-47684: kernel: tcp: check skb is non-NULL in tcp_rto_delta_us() VUL-0: CVE-2023-52919: kernel: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() VUL-0: CVE-2024-50020: kernel: ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() VUL-0: CVE-2024-50019: kernel: kthread: unpark only parked kthread VUL-0: CVE-2024-47685: kernel: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() VUL-0: CVE-2024-47686: kernel: ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() VUL-0: CVE-2024-47687: kernel: vdpa/mlx5: Fix invalid mr resource destroy VUL-0: CVE-2024-47688: kernel: driver core: Fix a potential null-ptr-deref in module_add_driver() VUL-0: CVE-2024-47693: kernel: IB/core: Fix ib_cache_setup_one error flow cleanup VUL-0: CVE-2024-47718: kernel: wifi: rtw88: always wait for both firmware loading attempts VUL-0: CVE-2024-47713: kernel: wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() VUL-0: CVE-2024-47712: kernel: wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param VUL-0: CVE-2024-47714: kernel: wifi: mt76: mt7996: use hweight16 to get correct tx antenna net: mana: Fix the extra HZ in mana_hwc_send_request RDMA/mana_ib: use the correct page table index based on hardware page size RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page VUL-0: CVE-2024-47720: kernel: drm/amd/display: add null check for set_output_gamma in dcn30_set_output_transfer_func VUL-0: CVE-2023-52918: kernel: media: pci: cx23885: check cx23885_vdev_init() return VUL-0: CVE-2024-47709: kernel: can: bcm: clear bo->bcm_proc_read after remove_proc_entry(). VUL-0: CVE-2024-47710: kernel: sock_map: add a cond_resched() in sock_hash_free() VUL-0: CVE-2024-47723: kernel: jfs: fix out-of-bounds in dbNextAG() and diAlloc() VUL-0: CVE-2024-47737: kernel: nfsd: call cache_put if xdr_reserve_space returns NULL VUL-0: CVE-2024-47730: kernel: crypto: hisilicon/qm - inject error before stopping queue VUL-0: CVE-2024-47728: kernel: bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error VUL-0: CVE-2024-50015: kernel: ext4: dax: fix overflowing extents beyond inode size when partially writing VUL-0: CVE-2024-50013: kernel: exfat: fix memory leak in exfat_load_bitmap() VUL-0: CVE-2024-50002: kernel: static_call: Handle module init failure correctly in static_call_del_module() VUL-0: CVE-2024-50001: kernel: net/mlx5: Fix error path in multi-packet WQE transmit VUL-0: CVE-2024-50000: kernel: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() VUL-0: CVE-2024-49996: kernel: cifs: Fix buffer overflow when parsing NFS reparse points uvdevice not available in SL-Micro s390x image VUL-0: CVE-2024-49986: kernel: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors VUL-0: CVE-2024-49985: kernel: i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume VUL-0: CVE-2024-49983: kernel: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free VUL-0: CVE-2024-49982: kernel: aoe: fix the potential use-after-free problem in more places VUL-0: CVE-2024-49981: kernel: media: venus: fix use after free bug in venus_remove due to race condition VUL-0: CVE-2024-49976: kernel: tracing/timerlat: Drop interface_lock in stop_kthread() VUL-0: CVE-2024-49975: kernel: uprobes: fix kernel info leak via "[uprobes]" vma VUL-0: CVE-2024-49973: kernel: r8169: add tally counter fields added with RTL8125 VUL-0: CVE-2024-47732: kernel: crypto: iaa - Fix potential use after free bug VUL-0: CVE-2024-47735: kernel: RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled VUL-0: CVE-2024-47738: kernel: wifi: mac80211: don't use rate mask for offchannel TX either VUL-0: CVE-2024-47727: kernel: x86/tdx: Fix "in-kernel MMIO" check VUL-0: CVE-2024-47731: kernel: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing VUL-0: CVE-2024-47739: kernel: padata: use integer wrap around to prevent deadlock on seq_nr overflow VUL-0: CVE-2024-47742: kernel: firmware_loader: block path traversal VUL-0: CVE-2024-47751: kernel: PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() VUL-0: CVE-2024-47743: kernel: KEYS: prevent NULL pointer dereference in find_asymmetric_key() VUL-0: CVE-2024-47752: kernel: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning VUL-0: CVE-2024-47754: kernel: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning VUL-0: CVE-2024-47744: kernel: KVM: use dedicated mutex to protect kvm_usage_count to avoid deadlock VUL-0: CVE-2024-49851: kernel: tpm: Clean up TPM space after command failure VUL-0: CVE-2024-47745: kernel: mm: call the security_mmap_file() LSM hook in remap_file_pages() VUL-0: CVE-2024-49967: kernel: ext4: no need to continue when the number of entries is 1 VUL-0: CVE-2024-49966: kernel: ocfs2: cancel dqi_sync_work before freeing oinfo VUL-0: CVE-2024-49965: kernel: ocfs2: remove unreasonable unlock in ocfs2_read_blocks VUL-0: CVE-2024-47747: kernel: net: seeq: fix use after free vulnerability in ether3 Driver Due to Race Condition VUL-0: CVE-2024-49963: kernel: mailbox: bcm2835: Fix timeout during suspend mode VUL-0: CVE-2024-49961: kernel: media: i2c: ar0521: Use cansleep version of gpiod_set_value() VUL-0: CVE-2024-49959: kernel: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error VUL-0: CVE-2024-49958: kernel: ocfs2: reserve space for inline xattr before attaching reflink tree VUL-0: CVE-2024-49957: kernel: ocfs2: fix null-ptr-deref when journal load failed. VUL-0: CVE-2024-49955: kernel: ACPI: battery: Fix possible crash when unregistering a battery hook VUL-0: CVE-2024-49954: kernel: static_call: Replace pointless WARN_ON() in static_call_module_notify() VUL-0: CVE-2024-49953: kernel: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice VUL-0: CVE-2024-49952: kernel: netfilter: nf_tables: prevent nf_skb_duplicated corruption VUL-0: CVE-2024-49950: kernel: Bluetooth: L2CAP: Fix uaf in l2cap_connect VUL-0: CVE-2024-49949: kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO VUL-0: CVE-2024-49947: kernel: net: test for not too small csum_start in virtio_net_hdr_to_skb() VUL-0: CVE-2024-49946: kernel: ppp: do not assume bh is held in ppp_channel_bridge_input() VUL-0: CVE-2024-49945: kernel: net/ncsi: Disable the ncsi work before freeing the associated structure VUL-0: CVE-2024-49944: kernel: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start VUL-0: CVE-2024-47748: kernel: vhost_vdpa: assign irq bypass producer token correctly VUL-0: CVE-2024-47749: kernel: RDMA/cxgb4: added NULL check for lookup_atid VUL-0: CVE-2024-47750: kernel: RDMA/hns: fix Use-After-Free of rsv_qp on HIP08 printk: Add notation to console_srcu locking VUL-0: CVE-2024-47756: kernel: PCI: keystone: fix if-statement expression in ks_pcie_quirk() VUL-0: CVE-2024-47757: kernel: nilfs2: fix potential oob read in nilfs_btree_check_delete() VUL-0: CVE-2024-49850: kernel: bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos VUL-0: CVE-2024-49853: kernel: firmware: arm_scmi: fix double free in OPTEE transport VUL-0: CVE-2024-49855: kernel: nbd: fix race between timeout and normal completion VUL-0: CVE-2024-49886: kernel: platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug VUL-0: CVE-2024-49884: kernel: ext4: fix slab-use-after-free in ext4_split_extent_at() VUL-0: CVE-2024-49883: kernel: ext4: aovid use-after-free in ext4_ext_insert_extent() VUL-0: CVE-2024-49882: kernel: ext4: fix double brelse() the buffer of the extents path VUL-0: CVE-2024-49881: kernel: ext4: update orig_path in ext4_find_extent() KVM SEV-ES: wrmsr to MSR_IA32_DEBUGCTLMSR crashes the guest VUL-0: CVE-2024-49888: kernel: bpf: fix a sdiv overflow issue VUL-0: CVE-2024-49890: kernel: drm/amd/pm: ensure the fw_info is not null before using it VUL-0: CVE-2024-49891: kernel: scsi: lpfc: validate hdwq pointers before dereferencing in reset/errata paths VUL-0: CVE-2024-49892: kernel: drm/amd/display: initialize get_bytes_per_element's default to 1 VUL-0: CVE-2024-49896: kernel: drm/amd/display: check stream before comparing them VUL-0: CVE-2024-49898: kernel: drm/amd/display: check null-initialized variables VUL-0: CVE-2024-49925: kernel: fbdev: efifb: register sysfs groups through driver core VUL-0: CVE-2024-50062: kernel: RDMA/rtrs-srv: Avoid null pointer deref during path establishment VUL-0: CVE-2024-49928: kernel: wifi: rtw89: avoid reading out of bounds when loading TX power FW elements VUL-0: CVE-2024-49858: kernel: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption VUL-0: CVE-2024-49929: kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference VUL-0: CVE-2024-49861: kernel: bpf: Fix helper writes to read-only maps VUL-0: CVE-2024-49863: kernel: vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() VUL-0: CVE-2024-49864: kernel: rxrpc: Fix a race between socket set up and I/O thread creation VUL-0: CVE-2024-49987: kernel: bpftool: fix undefined behavior in qsort(NULL, 0, ...) VUL-0: CVE-2024-49866: kernel: tracing/timerlat: Fix a race during cpuhp processing VUL-0: CVE-2024-49930: kernel: wifi: ath11k: fix array out-of-bound access in SoC stats VUL-0: CVE-2024-49867: kernel: btrfs: wait for fixup workers before stopping cleaner kthread during umount VUL-0: CVE-2024-50061: kernel: i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition VUL-0: CVE-2024-49968: kernel: ext4: filesystems without casefold feature cannot be mounted with siphash VUL-0: CVE-2024-49868: kernel: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion VUL-0: CVE-2024-49931: kernel: wifi: ath12k: fix array out-of-bound access in SoC stats VUL-0: CVE-2024-49870: kernel: cachefiles: fix dentry leak in cachefiles_open_file() VUL-0: CVE-2024-49991: kernel: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer VUL-0: CVE-2024-50058: kernel: serial: protect uart_port_dtr_rts() in uart_shutdown() too VUL-0: CVE-2024-49871: kernel: Input: adp5589-keys - fix NULL pointer dereference VUL-0: CVE-2024-49874: kernel: i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition VUL-0: CVE-2024-49901: kernel: drm/msm/adreno: assign msm_gpu->pdev earlier to avoid nullptrs VUL-0: CVE-2024-49913: kernel: drm/amd/display: add null check for top_pipe_to_program in commit_planes_for_stream VUL-0: CVE-2024-50049: kernel: drm/amd/display: Check null pointer before dereferencing se VUL-0: CVE-2024-50048: kernel: fbcon: Fix a NULL pointer dereference issue in fbcon_putcs VUL-0: CVE-2024-50017: kernel: x86/mm/ident_map: Use gbpages only where full GB page should be mapped. VUL-0: CVE-2024-49920: kernel: drm/amd/display: check null pointers before multiple uses VUL-0: CVE-2024-49962: kernel: ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() VUL-0: CVE-2024-49972: kernel: drm/amd/display: deallocate DML memory if allocation fails VUL-0: REJECTED: CVE-2024-49993: kernel: iommu/vt-d: fix potential lockup if qi_submit_sync called with 0 count VUL-0: CVE-2024-50008: kernel: wifi: mwifiex: fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() VUL-0: CVE-2024-50009: kernel: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value VUL-0: CVE-2024-50055: kernel: driver core: bus: Fix double free in driver API bus_register() VUL-0: CVE-2024-49906: kernel: drm/amd/display: Check null pointer before try to access it VUL-0: CVE-2024-49875: kernel: nfsd: map the EBADMSG to nfserr_io to avoid warning VUL-0: CVE-2024-49907: kernel: drm/amd/display: Check null pointers before using dc->clk_mgr VUL-0: CVE-2024-49908: kernel: drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2) VUL-0: CVE-2024-49909: kernel: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func VUL-0: CVE-2024-49877: kernel: ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate VUL-0: CVE-2024-49878: kernel: resource: fix region_intersects() vs add_memory_driver_managed() No Ethernet device anymore on RPi3 VUL-0: CVE-2024-50059: kernel: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition VUL-0: CVE-2024-49879: kernel: drm: omapdrm: Add missing check for alloc_ordered_workqueue VUL-0: CVE-2024-49895: kernel: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation VUL-0: CVE-2024-49894: kernel: drm/amd/display: fix index out of bounds in degamma hardware format translation VUL-0: CVE-2024-49897: kernel: drm/amd/display: Check phantom_stream before it is used VUL-0: CVE-2024-49905: kernel: drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) VUL-0: CVE-2024-49899: kernel: drm/amd/display: initialize denominators' default to 1 VUL-0: CVE-2024-49900: kernel: jfs: fix uninit-value access of new_ea in ea_buffer VUL-0: CVE-2024-49923: kernel: drm/amd/display: pass non-null to dcn20_validate_apply_pipe_split_flags VUL-0: CVE-2024-49903: kernel: jfs: Fix uaf in dbFreeBits VUL-0: CVE-2024-49911: kernel: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func VUL-0: CVE-2024-49912: kernel: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' VUL-0: CVE-2024-49933: kernel: blk_iocost: fix more out of bound shifts VUL-0: CVE-2024-49914: kernel: drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe VUL-0: CVE-2024-49935: kernel: ACPI: PAD: fix crash in exit_round_robin() VUL-0: CVE-2024-49921: kernel: drm/amd/display: Check null pointers before used VUL-0: CVE-2024-49922: kernel: drm/amd/display: Check null pointers before using them VUL-0: CVE-2024-49902: kernel: jfs: check if leafidx greater than num leaves per dmap tree VUL-0: CVE-2024-49939: kernel: wifi: rtw89: avoid to add interface to list twice when SER VUL-0: CVE-2024-49974: kernel: NFSD: limit the number of concurrent async COPY operations VUL-0: CVE-2024-50003: kernel: drm/amd/display: fix system hang while resume with TBT monitor VUL-0: CVE-2024-50012: kernel: cpufreq: Avoid a bad reference count on CPU node VUL-0: CVE-2024-49934: kernel: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name VUL-0: CVE-2024-50035: kernel: ppp: fix ppp_async_encode() illegal access VUL-0: CVE-2024-50007: kernel: ALSA: asihpi: fix potential OOB array access VUL-0: CVE-2024-49960: kernel: ext4: fix timer use-after-free on failed mount VUL-0: CVE-2024-50004: kernel: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event VUL-0: CVE-2024-50067: kernel: uprobe: avoid out-of-bounds memory access of fetching args VUL-0: CVE-2024-50060: kernel: io_uring: check if we need to reschedule during overflow flush VUL-0: CVE-2024-50047: kernel: smb: client: fix UAF in async decryption VUL-0: CVE-2024-49936: kernel: net/xen-netback: prevent UAF in xenvif_flush_hash() VUL-0: CVE-2024-49937: kernel: wifi: cfg80211: Set correct chandef when starting CAC VUL-0: CVE-2024-49995: kernel: tipc: guard against string buffer overrun VUL-0: CVE-2024-50063: kernel: bpf: Prevent tail call between progs attached to different hooks VUL-0: CVE-2024-53142: kernel: malformed cpio entry may leak early-boot memory contents VUL-0: CVE-2024-50006: kernel: ext4: fix i_data_sem unlock order in ext4_ind_migrate() VUL-0: CVE-2024-50014: kernel: ext4: fix access to uninitialised lock in fc replay path VUL-0: CVE-2024-49989: kernel: drm/amd/display: fix double free issue during amdgpu module unload VUL-0: CVE-2024-50084: kernel: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() VUL-0: CVE-2024-50088: kernel: btrfs: fix uninitialized pointer free in add_inode_ref() VUL-0: CVE-2024-50087: kernel: btrfs: fix uninitialized pointer free on read_alloc_one_name() error VUL-0: CVE-2024-50082: kernel: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race VUL-0: CVE-2024-50081: kernel: blk-mq: setup queue ->tag_set before initializing hctx VUL-0: CVE-2024-50080: kernel: ublk: don't allow user copy for unprivileged device VUL-0: CVE-2024-50078: kernel: Bluetooth: Call iso_exit() on module unload VUL-0: CVE-2024-50077: kernel: Bluetooth: ISO: Fix multiple init when debugfs is disabled VUL-0: CVE-2024-50076: kernel: vt: prevent kernel-infoleak in con_font_get() VUL-0: CVE-2024-50075: kernel: xhci: tegra: fix checked USB2 port number VUL-0: CVE-2024-50074: kernel: parport: Proper fix for array out-of-bounds access VUL-0: CVE-2024-50069: kernel: pinctrl: apple: check devm_kasprintf() returned value VUL-0: CVE-2024-49969: kernel: drm/amd/display: Fix index out of bounds in DCN30 color transformation VUL-0: CVE-2024-50073: kernel: tty: n_gsm: fix use-after-free in gsm_cleanup_mux SLE15-SP6 KOTD (commit 32a3e57bb675) boot Oops VUL-0: CVE-2024-49938: kernel: wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit KVM: s390: gaccess: Check if guest address is in memslot KVM: s390: Change virtual to physical address access in diag 0x258 handler s390/sclp_vt220: Convert newlines to CRLF instead of LFCR s390/sclp: Deactivate sclp after all its users s390/pci: Handle PCI error codes other than 0x3a [sle15sp7][Build 36.1][ppc64le]cryptlvm+minimal_x installation fails with error "/sbin/cryptsetup --batch-mode open --type luks '/dev/vda2' 'cr_vda2' --tries 1 --key-file -' failed" Update Broadcom Emulex lpfc driver to 14.4.0.5 HP 320 webcam not working VUL-0: CVE-2024-49852: kernel: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() VUL-0: CVE-2023-52920: kernel: bpf: support non-r10 register spill/fill to/from stack in precision tracking VUL-0: CVE-2024-50089: kernel: unicode: Don't special case ignorable code points VUL-0: CVE-2024-50101: kernel: iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices VUL-0: CVE-2024-50096: kernel: nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error VUL-0: CVE-2024-50095: kernel: RDMA/mad: Improve handling of timed out WRs of mad agent VUL-0: CVE-2024-50100: kernel: USB: gadget: dummy-hcd: Fix "task hung" problem VUL-0: CVE-2024-50093: kernel: thermal: intel: int340x: processor: Fix warning during module unload VUL-0: CVE-2024-50103: kernel: ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() VUL-0: CVE-2024-50102: kernel: x86: fix user address masking non-canonical speculation issue VUL-0: CVE-2024-50098: kernel: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down VUL-0: CVE-2024-50108: kernel: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too VUL-0: CVE-2024-50110: kernel: xfrm: fix one more kernel-infoleak in algo dumping VUL-0: CVE-2024-50099: kernel: arm64: probes: Remove broken LDR (literal) uprobe support VUL-0: CVE-2024-50135: kernel: nvme-pci: fix race condition between reset and nvme_dev_disable() VUL-0: CVE-2024-50134: kernel: drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA VUL-0: CVE-2024-50116: kernel: nilfs2: fix kernel bug due to missing clearing of buffer delay flag VUL-0: CVE-2024-50130: kernel: netfilter: bpf: must hold reference on net namespace VUL-0: CVE-2024-50131: kernel: tracing: Consider the NULL character when validating the event length VUL-0: CVE-2024-50117: kernel: drm/amd: Guard against bad data for ATIF ACPI method VUL-0: CVE-2024-50128: kernel: net: wwan: fix global oob in wwan_rtnl_policy VUL-0: CVE-2024-50127: kernel: net: sched: fix use-after-free in taprio_change() VUL-0: CVE-2024-50136: kernel: net/mlx5: Unregister notifier on eswitch init failure VUL-0: CVE-2024-50115: kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory VUL-0: CVE-2024-50121: kernel: nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net VUL-0: CVE-2024-50124: kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout VUL-0: CVE-2024-50125: kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout VUL-0: CVE-2024-50138: kernel: bpf: Use raw_spinlock_t in ringbuf VUL-0: CVE-2024-50172: kernel: RDMA/bnxt_re: Fix a possible memory leak VUL-0: CVE-2024-50157: kernel: RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop VUL-0: CVE-2024-50155: kernel: netdevsim: use cond_resched() in nsim_dev_trap_report_work() VUL-0: CVE-2024-50158: kernel: RDMA/bnxt_re: Fix out of bound check VUL-0: CVE-2024-50159: kernel: firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() VUL-0: CVE-2024-50145: kernel: octeon_ep: add SKB allocation failures handling in __octep_oq_process_rx() VUL-0: CVE-2024-50167: kernel: be2net: fix potential memory leak in be_xmit() VUL-0: CVE-2024-50166: kernel: fsl/fman: Fix refcount handling of fman-related devices VUL-0: CVE-2024-50150: kernel: usb: typec: altmode should keep reference to parent VUL-0: CVE-2024-50146: kernel: net/mlx5e: don't call cleanup on profile rollback failure VUL-0: CVE-2024-50171: kernel: net: systemport: fix potential memory leak in bcm_sysport_xmit() VUL-0: CVE-2024-50153: kernel: scsi: target: core: Fix null-ptr-deref in target_alloc_device() VUL-0: CVE-2024-50139: kernel: KVM: arm64: fix shift-out-of-bounds bug VUL-0: CVE-2024-50148: kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister VUL-0: CVE-2024-50141: kernel: ACPI: PRM: find EFI_MEMORY_RUNTIME block for PRM handler and context VUL-0: CVE-2024-50147: kernel: net/mlx5: fix command bitmask initialization VUL-0: CVE-2024-50154: kernel: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). VUL-0: CVE-2024-50156: kernel: drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() VUL-0: CVE-2024-50160: kernel: ALSA: hda/cs8409: Fix possible NULL dereference VUL-0: CVE-2024-50200: kernel: maple_tree: correct tree corruption on spanning store VUL-0: CVE-2024-50176: kernel: remoteproc: k3-r5: Fix error handling when power-up failed VUL-0: CVE-2024-50175: kernel: media: qcom: camss: Remove use_count guard in stop_streaming VUL-0: CVE-2024-50210: kernel: posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() VUL-0: CVE-2024-50198: kernel: iio: light: veml6030: fix IIO device retrieval from embedded device VUL-0: CVE-2024-50195: kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() VUL-0: CVE-2024-50201: kernel: drm/radeon: Fix encoder->possible_clones VUL-0: CVE-2024-50189: kernel: HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() VUL-0: CVE-2024-50192: kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE VUL-0: CVE-2024-50188: kernel: net: phy: dp83869: fix memory corruption when enabling fiber VUL-0: CVE-2024-50187: kernel: drm/vc4: Stop the active perfmon before being destroyed VUL-0: CVE-2024-50186: kernel: net: explicitly clear the sk pointer, when pf->create fails VUL-0: CVE-2024-50194: kernel: arm64: probes: Fix uprobes for big-endian kernels VUL-0: CVE-2024-50196: kernel: pinctrl: ocelot: fix system hang on level based interrupts VUL-0: CVE-2024-50209: kernel: RDMA/bnxt_re: Add a check for memory allocation VUL-0: CVE-2024-50177: kernel: drm/amd/display: fix a UBSAN warning in DML2.1 VUL-0: CVE-2024-50208: kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages turbostat: fails with error "open failed: Too many open files" on large systems VUL-0: CVE-2024-50179: kernel: ceph: remove the incorrect Fw reference check when dirtying pages VUL-0: CVE-2024-50180: kernel: fbdev: sisfb: Fix strbuf array overflow VUL-0: CVE-2024-50181: kernel: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D VUL-0: CVE-2024-50182: kernel: secretmem: disable memfd_secret() if arch cannot set direct map VUL-0: CVE-2024-50183: kernel: scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance VUL-0: CVE-2024-42102: kernel: revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" VUL-0: CVE-2024-50184: kernel: virtio_pmem: Check device status before requesting flush VUL-0: CVE-2024-50235: kernel: wifi: cfg80211: clear wdev->cqm_config pointer on free VUL-0: CVE-2024-50216: kernel: xfs: fix finding a last resort AG in xfs_filestream_pick_ag VUL-0: CVE-2024-50221: kernel: drm/amd/pm: Vangogh: Fix kernel memory out of bounds write VUL-0: CVE-2024-50224: kernel: spi: spi-fsl-dspi: Fix crash when not using GPIO chip select VUL-0: CVE-2024-50215: kernel: nvmet-auth: assign dh_key to NULL after kfree_sensitive VUL-0: CVE-2024-50218: kernel: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow VUL-0: CVE-2024-50225: kernel: btrfs: fix error propagation of split bios VUL-0: CVE-2024-50249: kernel: ACPI: CPPC: Make rmw_lock a raw_spin_lock VUL-0: CVE-2024-50252: kernel: mlxsw: spectrum_ipip: fix memory leak when changing remote IPv6 address VUL-0: CVE-2024-50245: kernel: fs/ntfs3: fix possible deadlock in mi_read VUL-0: REJECTED: CVE-2024-50228: kernel: mm: shmem: fix data-race in shmem_getattr() VUL-0: CVE-2024-50229: kernel: nilfs2: fix potential deadlock with newly created symlinks VUL-0: CVE-2024-50230: kernel: nilfs2: fix kernel bug due to missing clearing of checked flag VUL-0: CVE-2024-50246: kernel: fs/ntfs3: add rough attr alloc_size check VUL-0: CVE-2024-50231: kernel: iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() VUL-0: CVE-2024-50232: kernel: iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() VUL-0: CVE-2024-50233: kernel: staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() VUL-0: CVE-2024-50234: kernel: wifi: iwlegacy: Clear stale interrupts before resuming device VUL-0: CVE-2024-50236: kernel: wifi: ath10k: Fix memory leak in management tx VUL-0: CVE-2024-50237: kernel: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower VUL-0: CVE-2024-50240: kernel: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend VUL-0: CVE-2024-50248: kernel: ntfs3: add bounds checking to mi_enum_attr() VUL-0: CVE-2024-50250: kernel: fsdax: dax_unshare_iter needs to copy entire blocks VUL-0: CVE-2024-50255: kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs Update Broadcom Emulex lpfc driver for SLES15 SP7 to 14.4.0.5 and 14.4.0.6 VUL-0: CVE-2024-50257: kernel: netfilter: fix use-after-free in get_info() VUL-0: CVE-2024-50261: kernel: macsec: fix use-after-free while sending the offloading packet [15-SP5][Build :36349:dtb-armv7l] ctdb HA resource does not start after node fence VUL-0: CVE-2024-50205: kernel: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() No sound on Medion E15433 laptop with Alder Lake PCH-P High Definition Audio Controller No sound on Laptop after upgrade, sof-firmware-2024.09-150600.3.3.1.noarch VUL-0: CVE-2024-50169: kernel: vsock: Update rx_bytes on read_skb() kABI breakage in "struct bpf_verifier_state_list" since update 6.4.0-150600.23.14 Random reboot with virtualization on Ryzen 7000/8000 CPUs VUL-0: CVE-2023-52921: kernel: drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() VUL-0: CVE-2024-50264: kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans VUL-0: CVE-2024-50265: kernel: ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() VUL-0: CVE-2024-50267: kernel: USB: serial: io_edgeport: fix use after free in debug printk VUL-0: CVE-2024-50268: kernel: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() VUL-0: CVE-2024-50269: kernel: usb: musb: sunxi: Fix accessing an released usb phy VUL-0: CVE-2024-50271: kernel: signal: restore the override_rlimit logic VUL-0: CVE-2024-50273: kernel: btrfs: reinitialize delayed ref list after deleting it from the list VUL-0: CVE-2024-50274: kernel: idpf: avoid vport access in idpf_get_link_ksettings VUL-0: CVE-2024-50275: kernel: arm64/sve: Discard stale CPU state when handling SVE traps VUL-0: CVE-2024-50276: kernel: net: vertexcom: mse102x: Fix possible double free of TX skb VUL-0: CVE-2024-50279: kernel: dm cache: fix out-of-bounds access to the dirty bitset when resizing VUL-0: CVE-2024-50282: kernel: drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() VUL-0: CVE-2024-50287: kernel: media: v4l2-tpg: prevent the risk of a division by zero VUL-0: CVE-2024-50289: kernel: media: av7110: fix a spectre vulnerability VUL-0: CVE-2024-50290: kernel: media: cx24116: prevent overflows on SNR calculus VUL-0: CVE-2024-50292: kernel: ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove VUL-0: CVE-2024-50295: kernel: net: arc: fix the device for dma_map_single/dma_unmap_single VUL-0: CVE-2024-50296: kernel: net: hns3: fix kernel crash when uninstalling driver VUL-0: CVE-2024-50298: kernel: net: enetc: allocate vf_state during PF probes VUL-0: CVE-2024-50301: kernel: security/keys: fix slab-out-of-bounds in key_task_permission VUL-0: CVE-2024-50302: kernel: HID: core: zero-initialize the report buffer VUL-0: CVE-2024-53043: kernel: mctp i2c: handle NULL header address VUL-0: CVE-2024-53045: kernel: ASoC: dapm: fix bounds checker error in dapm_widget_list_create VUL-0: CVE-2024-53042: kernel: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() VUL-0: CVE-2024-53051: kernel: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability VUL-0: CVE-2024-53052: kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write VUL-0: CVE-2024-53055: kernel: wifi: iwlwifi: mvm: fix 6 GHz scan construction VUL-0: CVE-2024-53058: kernel: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data VUL-0: CVE-2024-53059: kernel: wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() VUL-0: CVE-2024-53060: kernel: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported VUL-0: CVE-2024-53061: kernel: media: s5p-jpeg: prevent buffer overflows VUL-0: CVE-2024-53063: kernel: media: dvbdev: prevent the risk of out of memory access VUL-0: CVE-2024-53066: kernel: nfs: Fix KMSAN warning in decode_getfattr_attrs() VUL-0: CVE-2024-53068: kernel: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() VUL-0: CVE-2024-53072: kernel: platform/x86/amd/pmc: Detect when STB is not available VUL-0: CVE-2024-53074: kernel: wifi: iwlwifi: mvm: don't leak a link on AP removal VUL-0: CVE-2024-53076: kernel: iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() VUL-0: CVE-2024-53056: kernel: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() VUL-0: CVE-2024-53079: kernel: mm/thp: fix deferred split unqueue naming and locking VUL-0: CVE-2024-53081: kernel: media: ar0521: don't overflow when checking PLL values VUL-0: CVE-2024-53082: kernel: virtio_net: Add hash_key_length check VUL-0: CVE-2024-53085: kernel: tpm: Lock TPM chip in tpm_pm_suspend() first VUL-0: CVE-2024-53088: kernel: i40e: fix race condition by adding filter's intermediate sync state VUL-0: CVE-2024-53093: kernel: nvme-multipath: defer partition scanning VUL-0: CVE-2024-53094: kernel: RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES VUL-0: CVE-2024-53095: kernel: smb: client: Fix use-after-free of network namespace. VUL-0: CVE-2024-53048: kernel: ice: fix crash on probe for DPLL enabled E810 LOM SLES15 SP6: Error Injection or hot unplug crypto device causes "unregister_netdevice: waiting for eth1 to become free, Usage count = 2" error on both dedicated and sr-iov crypto devices. VUL-0: CVE-2024-53096: kernel: mm: resolve faulty mmap_region() error path behaviour VUL-0: CVE-2024-53101: kernel: fs: fix uninitialized value issue in from_kuid and from_kgid VUL-0: CVE-2024-53100: kernel: nvme: tcp: avoid race between queue_lock lock and destroy VUL-0: CVE-2023-52922: kernel: can: bcm: Fix UAF in bcm_proc_show() unttached inode after power cut with orphan file feature enabled f2fs_gc occupies 100% cpu nodes huge page allocation when there are surplus page VUL-0: CVE-2024-53104: kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format [PATCH] jbd2: avoid infinite transaction commit loop [PATCH] jbd2: avoid mount failed when commit block is partial submitted [PATCH] jbd2: make jbd2_journal_get_max_txn_bufs() internal [PATCH] jbd2: precompute number of transaction descriptor blocks [PATCH] jbd2: avoid memleak in jbd2_journal_write_metadata_buffer [PATCH] jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev [PATCH] jbd2: correct the printing of write_flags in jbd2_write_superblock() [PATCH] jbd2: fix soft lockup in journal_finish_inode_data_buffers() VUL-0: CVE-2024-53114: kernel: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client VUL-0: CVE-2024-53121: kernel: net/mlx5: fs, lock FTE when checking if active VUL-0: CVE-2024-53108: kernel: drm/amd/display: Adjust VSDB parser for replay feature VUL-0: CVE-2024-53106: kernel: ima: fix buffer overrun in ima_eventdigest_init_common VUL-0: CVE-2024-53110: kernel: vp_vdpa: fix id_table array not null terminated error VUL-0: CVE-2024-53112: kernel: ocfs2: uncache inode which has failed entering the group signal: Replace BUG_ON()s posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone cgroup/bpf: only cgroup v2 can be attached by bpf programs Crash at at fs/nfsd/xdr4.h VUL-0: CVE-2024-53138: kernel: net/mlx5e: kTLS, Fix incorrect page refcounting