CVE-2022-48792

• CVE-url: https://ubuntu.com/security/CVE-2024-42068
  • bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
• CVE-url: https://ubuntu.com/security/CVE-2024-42079
  • gfs2: Fix NULL pointer dereference in gfs2_log_flush
• CVE-url: https://ubuntu.com/security/CVE-2024-42226
  • usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
• CVE-url: https://ubuntu.com/security/CVE-2022-48790
  • nvme: introduce a controller state machine
  • nvme: move namespace scanning to core
  • nvme: move AER handling to common code
  • nvme: fix a possible use-after-free in controller reset during load
  • nvme-pci: fix multiple ctrl removal scheduling
• CVE-url: https://ubuntu.com/security/CVE-2024-42236
  • usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
• CVE-url: https://ubuntu.com/security/CVE-2024-41095
  • drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
• CVE-url: https://ubuntu.com/security/CVE-2024-41098
  • ata: libata-core: Fix null pointer dereference on error
• CVE-url: https://ubuntu.com/security/CVE-2024-42244
  • tty: Define ASYNC_ replacement bits
  • tty: Replace ASYNC_CTS_FLOW bit and update atomically
  • tty: Remove ASYNC_CLOSING
  • tty: mxser: Remove ASYNC_CLOSING
  • isdn: Remove ASYNC_CLOSING
  • tty: Replace TTY_IO_ERROR bit tests with tty_io_error()
  • tty: Replace ASYNC_NORMAL_ACTIVE bit and update atomically
  • tty: Replace ASYNC_CHECK_CD and update atomically
  • tty: Replace ASYNC_SUSPENDED bit and update atomically
  • tty: Replace ASYNC_INITIALIZED bit and update atomically
  • USB: serial: mos7840: fix crash on resume
• CVE-url: https://ubuntu.com/security/CVE-2024-41089
  • drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
• CVE-url: https://ubuntu.com/security/CVE-2024-42232
  • libceph: fix race between delayed_work() and ceph_monc_stop()
• Bionic update: upstream stable patchset 2022-03-29 (LP: #1967013) // CVE- url: https://ubuntu.com/security/CVE-2022-48809
  • net: fix a memleak when uncloning an skb dst and its metadata
• CVE-url: https://ubuntu.com/security/CVE-2024-42153
  • i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
• CVE-url: https://ubuntu.com/security/CVE-2022-48791
  • scsi: pm80xx: Fix TMF task completion race condition
  • scsi: pm8001: Fix use-after-free for aborted TMF sas_task
• CVE-url: https://ubuntu.com/security/CVE-2022-48792
  • scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
• CVE-url: https://ubuntu.com/security/CVE-2024-42154
  • tcp_metrics: validate source addr length
• CVE-url: https://ubuntu.com/security/CVE-2024-38570
  • gfs2: Rename sd_{ glock => kill }_wait
  • gfs2: Fix potential glock use-after-free on unmount
• CVE-url: https://ubuntu.com/security/CVE-2024-38583
  • timers: Use del_timer_sync() even on UP
  • timers: Rename del_timer_sync() to timer_delete_sync()
  • timers: Rename del_timer() to timer_delete()
  • timers: Split [try_to_]del_timer_sync to prepare for shutdown mode
  • timers: Add shutdown mechanism to the internal functions
  • timers: Provide timer_shutdown_sync
  • nilfs2: fix use-after-free of timer for log writer thread
  • nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  • nilfs2: fix potential hang in nilfs_detach_log_writer()
• CVE-url: https://ubuntu.com/security/CVE-2024-42070
  • netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
• CVE-url: https://ubuntu.com/security/CVE-2024-42228
  • drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

• CVE-url: https://ubuntu.com/security/CVE-2024-42068
  • bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
• CVE-url: https://ubuntu.com/security/CVE-2024-42079
  • gfs2: Fix NULL pointer dereference in gfs2_log_flush
• CVE-url: https://ubuntu.com/security/CVE-2024-42226
  • usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
• CVE-url: https://ubuntu.com/security/CVE-2022-48790
  • nvme: introduce a controller state machine
  • nvme: move namespace scanning to core
  • nvme: move AER handling to common code
  • nvme: fix a possible use-after-free in controller reset during load
  • nvme-pci: fix multiple ctrl removal scheduling
• CVE-url: https://ubuntu.com/security/CVE-2024-42236
  • usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
• CVE-url: https://ubuntu.com/security/CVE-2024-41095
  • drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
• CVE-url: https://ubuntu.com/security/CVE-2024-41098
  • ata: libata-core: Fix null pointer dereference on error
• CVE-url: https://ubuntu.com/security/CVE-2024-42244
  • tty: Define ASYNC_ replacement bits
  • tty: Replace ASYNC_CTS_FLOW bit and update atomically
  • tty: Remove ASYNC_CLOSING
  • tty: mxser: Remove ASYNC_CLOSING
  • isdn: Remove ASYNC_CLOSING
  • tty: Replace TTY_IO_ERROR bit tests with tty_io_error()
  • tty: Replace ASYNC_NORMAL_ACTIVE bit and update atomically
  • tty: Replace ASYNC_CHECK_CD and update atomically
  • tty: Replace ASYNC_SUSPENDED bit and update atomically
  • tty: Replace ASYNC_INITIALIZED bit and update atomically
  • USB: serial: mos7840: fix crash on resume
• CVE-url: https://ubuntu.com/security/CVE-2024-41089
  • drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
• CVE-url: https://ubuntu.com/security/CVE-2024-42232
  • libceph: fix race between delayed_work() and ceph_monc_stop()
• Bionic update: upstream stable patchset 2022-03-29 (LP: #1967013) // CVE- url: https://ubuntu.com/security/CVE-2022-48809
  • net: fix a memleak when uncloning an skb dst and its metadata
• CVE-url: https://ubuntu.com/security/CVE-2024-42153
  • i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
• CVE-url: https://ubuntu.com/security/CVE-2022-48791
  • scsi: pm80xx: Fix TMF task completion race condition
  • scsi: pm8001: Fix use-after-free for aborted TMF sas_task
• CVE-url: https://ubuntu.com/security/CVE-2022-48792
  • scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
• CVE-url: https://ubuntu.com/security/CVE-2024-42154
  • tcp_metrics: validate source addr length
• CVE-url: https://ubuntu.com/security/CVE-2024-38570
  • gfs2: Rename sd_{ glock => kill }_wait
  • gfs2: Fix potential glock use-after-free on unmount
• CVE-url: https://ubuntu.com/security/CVE-2024-38583
  • timers: Use del_timer_sync() even on UP
  • timers: Rename del_timer_sync() to timer_delete_sync()
  • timers: Rename del_timer() to timer_delete()
  • timers: Split [try_to_]del_timer_sync to prepare for shutdown mode
  • timers: Add shutdown mechanism to the internal functions
  • timers: Provide timer_shutdown_sync
  • nilfs2: fix use-after-free of timer for log writer thread
  • nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  • nilfs2: fix potential hang in nilfs_detach_log_writer()
• CVE-url: https://ubuntu.com/security/CVE-2024-42070
  • netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
• CVE-url: https://ubuntu.com/security/CVE-2024-42228
  • drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

[ Ubuntu: 4.15.0-234.245 ]

• CVE-url: https://ubuntu.com/security/CVE-2024-42236
  • usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
• CVE-url: https://ubuntu.com/security/CVE-2024-41095
  • drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
• CVE-url: https://ubuntu.com/security/CVE-2024-41098
  • ata: libata-core: Fix null pointer dereference on error
• CVE-url: https://ubuntu.com/security/CVE-2024-42244
  • USB: serial: mos7840: fix crash on resume
• CVE-url: https://ubuntu.com/security/CVE-2024-41089
  • drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
• CVE-url: https://ubuntu.com/security/CVE-2024-42232
  • libceph: fix race between delayed_work() and ceph_monc_stop()
• CVE-url: https://ubuntu.com/security/CVE-2024-42153
  • i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
• CVE-url: https://ubuntu.com/security/CVE-2022-48791
  • scsi: pm80xx: Fix TMF task completion race condition
  • scsi: pm8001: Fix use-after-free for aborted TMF sas_task
• CVE-url: https://ubuntu.com/security/CVE-2022-48788
  • nvme-rdma: fix possible use-after-free in transport error_recovery work
• CVE-url: https://ubuntu.com/security/CVE-2022-48792
  • scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
• CVE-url: https://ubuntu.com/security/CVE-2022-48790
  • nvme: fix a possible use-after-free in controller reset during load
• CVE-url: https://ubuntu.com/security/CVE-2024-42154
  • tcp_metrics: validate source addr length
• CVE-url: https://ubuntu.com/security/CVE-2024-38596
  • af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
• CVE-url: https://ubuntu.com/security/CVE-2024-36270
  • netfilter: tproxy: bail out if IP has been disabled on the device
• CVE-url: https://ubuntu.com/security/CVE-2024-38780
  • dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
• CVE-url: https://ubuntu.com/security/CVE-2024-36886
  • tipc: fix UAF in error path
• CVE-url: https://ubuntu.com/security/CVE-2024-42068
  • bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
• CVE-url: https://ubuntu.com/security/CVE-2024-42156
  • s390/pkey: Wipe copies of clear-key structures on failure
• CVE-url: https://ubuntu.com/security/CVE-2024-42079
  • gfs2: Fix NULL pointer dereference in gfs2_log_flush
• CVE-url: https://ubuntu.com/security/CVE-2024-42223
  • media: dvb-frontends: tda10048: Fix integer overflow
• CVE-url: https://ubuntu.com/security/CVE-2024-42157
  • s390/pkey: Wipe sensitive data on failure
• CVE-url: https://ubuntu.com/security/CVE-2024-42160
  • f2fs: indicate shutdown f2fs to allow unmount successfully
  • f2fs: support fault_type mount option
  • f2fs: check validation of fault attrs in f2fs_build_fault_attr()
• CVE-url: https://ubuntu.com/security/CVE-2024-42224
  • net: dsa: mv88e6xxx: Correct check for empty list
• CVE-url: https://ubuntu.com/security/CVE-2024-38570
  • gfs2: Rename sd_{ glock => kill }_wait
  • gfs2: Fix potential glock use-after-free on unmount
• CVE-url: https://ubuntu.com/security/CVE-2024-38583
  • nilfs2: fix use-after-free of timer for log writer thread
  • nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  • nilfs2: fix potential hang in nilfs_detach_log_writer()
• CVE-url: https://ubuntu.com/security/CVE-2024-42070
  • netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
• CVE-url: https://ubuntu.com/security/CVE-2024-42077
  • ocfs2: fix DIO failure due to insufficient transaction credits
• CVE-url: https://ubuntu.com/security/CVE-2024-42226
  • usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
• CVE-url: https://ubuntu.com/security/CVE-2024-42228
  • drm/amdgpu: Using uninitialized value *size when…

• CVE-url: https://ubuntu.com/security/CVE-2024-42236
  • usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
• CVE-url: https://ubuntu.com/security/CVE-2024-41095
  • drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
• CVE-url: https://ubuntu.com/security/CVE-2024-41098
  • ata: libata-core: Fix null pointer dereference on error
• CVE-url: https://ubuntu.com/security/CVE-2024-42244
  • USB: serial: mos7840: fix crash on resume
• CVE-url: https://ubuntu.com/security/CVE-2024-41089
  • drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
• CVE-url: https://ubuntu.com/security/CVE-2024-42232
  • libceph: fix race between delayed_work() and ceph_monc_stop()
• CVE-url: https://ubuntu.com/security/CVE-2024-42153
  • i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
• CVE-url: https://ubuntu.com/security/CVE-2022-48791
  • scsi: pm80xx: Fix TMF task completion race condition
  • scsi: pm8001: Fix use-after-free for aborted TMF sas_task
• CVE-url: https://ubuntu.com/security/CVE-2022-48788
  • nvme-rdma: fix possible use-after-free in transport error_recovery work
• CVE-url: https://ubuntu.com/security/CVE-2022-48792
  • scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
• CVE-url: https://ubuntu.com/security/CVE-2022-48790
  • nvme: fix a possible use-after-free in controller reset during load
• CVE-url: https://ubuntu.com/security/CVE-2024-42154
  • tcp_metrics: validate source addr length
• CVE-url: https://ubuntu.com/security/CVE-2024-38596
  • af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
• CVE-url: https://ubuntu.com/security/CVE-2024-36270
  • netfilter: tproxy: bail out if IP has been disabled on the device
• CVE-url: https://ubuntu.com/security/CVE-2024-38780
  • dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
• CVE-url: https://ubuntu.com/security/CVE-2024-36886
  • tipc: fix UAF in error path
• CVE-url: https://ubuntu.com/security/CVE-2024-42068
  • bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
• CVE-url: https://ubuntu.com/security/CVE-2024-42156
  • s390/pkey: Wipe copies of clear-key structures on failure
• CVE-url: https://ubuntu.com/security/CVE-2024-42079
  • gfs2: Fix NULL pointer dereference in gfs2_log_flush
• CVE-url: https://ubuntu.com/security/CVE-2024-42223
  • media: dvb-frontends: tda10048: Fix integer overflow
• CVE-url: https://ubuntu.com/security/CVE-2024-42157
  • s390/pkey: Wipe sensitive data on failure
• CVE-url: https://ubuntu.com/security/CVE-2024-42160
  • f2fs: indicate shutdown f2fs to allow unmount successfully
  • f2fs: support fault_type mount option
  • f2fs: check validation of fault attrs in f2fs_build_fault_attr()
• CVE-url: https://ubuntu.com/security/CVE-2024-42224
  • net: dsa: mv88e6xxx: Correct check for empty list
• CVE-url: https://ubuntu.com/security/CVE-2024-38570
  • gfs2: Rename sd_{ glock => kill }_wait
  • gfs2: Fix potential glock use-after-free on unmount
• CVE-url: https://ubuntu.com/security/CVE-2024-38583
  • nilfs2: fix use-after-free of timer for log writer thread
  • nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  • nilfs2: fix potential hang in nilfs_detach_log_writer()
• CVE-url: https://ubuntu.com/security/CVE-2024-42070
  • netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
• CVE-url: https://ubuntu.com/security/CVE-2024-42077
  • ocfs2: fix DIO failure due to insufficient transaction credits
• CVE-url: https://ubuntu.com/security/CVE-2024-42226
  • usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
• CVE-url: https://ubuntu.com/security/CVE-2024-42228
  • drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

• CVE-url: https://ubuntu.com/security/CVE-2024-42236
  • usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
• CVE-url: https://ubuntu.com/security/CVE-2024-41095
  • drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
• CVE-url: https://ubuntu.com/security/CVE-2024-41098
  • ata: libata-core: Fix null pointer dereference on error
• CVE-url: https://ubuntu.com/security/CVE-2024-42244
  • USB: serial: mos7840: fix crash on resume
• CVE-url: https://ubuntu.com/security/CVE-2024-41089
  • drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
• CVE-url: https://ubuntu.com/security/CVE-2024-42232
  • libceph: fix race between delayed_work() and ceph_monc_stop()
• CVE-url: https://ubuntu.com/security/CVE-2024-42153
  • i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
• CVE-url: https://ubuntu.com/security/CVE-2022-48791
  • scsi: pm80xx: Fix TMF task completion race condition
  • scsi: pm8001: Fix use-after-free for aborted TMF sas_task
• CVE-url: https://ubuntu.com/security/CVE-2022-48788
  • nvme-rdma: fix possible use-after-free in transport error_recovery work
• CVE-url: https://ubuntu.com/security/CVE-2022-48792
  • scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
• CVE-url: https://ubuntu.com/security/CVE-2022-48790
  • nvme: fix a possible use-after-free in controller reset during load
• CVE-url: https://ubuntu.com/security/CVE-2024-42154
  • tcp_metrics: validate source addr length
• CVE-url: https://ubuntu.com/security/CVE-2024-38596
  • af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
• CVE-url: https://ubuntu.com/security/CVE-2024-36270
  • netfilter: tproxy: bail out if IP has been disabled on the device
• CVE-url: https://ubuntu.com/security/CVE-2024-38780
  • dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
• CVE-url: https://ubuntu.com/security/CVE-2024-36886
  • tipc: fix UAF in error path
• CVE-url: https://ubuntu.com/security/CVE-2024-42068
  • bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
• CVE-url: https://ubuntu.com/security/CVE-2024-42156
  • s390/pkey: Wipe copies of clear-key structures on failure
• CVE-url: https://ubuntu.com/security/CVE-2024-42079
  • gfs2: Fix NULL pointer dereference in gfs2_log_flush
• CVE-url: https://ubuntu.com/security/CVE-2024-42223
  • media: dvb-frontends: tda10048: Fix integer overflow
• CVE-url: https://ubuntu.com/security/CVE-2024-42157
  • s390/pkey: Wipe sensitive data on failure
• CVE-url: https://ubuntu.com/security/CVE-2024-42160
  • f2fs: indicate shutdown f2fs to allow unmount successfully
  • f2fs: support fault_type mount option
  • f2fs: check validation of fault attrs in f2fs_build_fault_attr()
• CVE-url: https://ubuntu.com/security/CVE-2024-42224
  • net: dsa: mv88e6xxx: Correct check for empty list
• CVE-url: https://ubuntu.com/security/CVE-2024-38570
  • gfs2: Rename sd_{ glock => kill }_wait
  • gfs2: Fix potential glock use-after-free on unmount
• CVE-url: https://ubuntu.com/security/CVE-2024-38583
  • nilfs2: fix use-after-free of timer for log writer thread
  • nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  • nilfs2: fix potential hang in nilfs_detach_log_writer()
• CVE-url: https://ubuntu.com/security/CVE-2024-42070
  • netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
• CVE-url: https://ubuntu.com/security/CVE-2024-42077
  • ocfs2: fix DIO failure due to insufficient transaction credits
• CVE-url: https://ubuntu.com/security/CVE-2024-42226
  • usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
• CVE-url: https://ubuntu.com/security/CVE-2024-42228
  • drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

• CVE-2026-90205
  • ocfs2: validate orphan slot during inode read {CVE-2026-90205}
• CVE-2026-93054
  • uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
• CVE-2026-93103
  • RDMA/hfi1: Preserve unit 0 on allocation failure {CVE-2026-93103}
• CVE-2026-89833
  • f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
• CVE-2026-89878
  • media: s2255: check firmware size before reading trailing marker {CVE-2026-89878}
• CVE-2026-90037
  • NFSD: Prevent client use-after-free during close_lru reaping {CVE-2026-90037}
• CVE-2026-90296
  • cpufreq: imx6q: fix devres accumulation across driver rebind {CVE-2026-90296}
• CVE-2026-90415
  • RDMA/cxgb4: free STAG index when TPT entry write fails {CVE-2026-90415}
• CVE-2026-90081
  • net/rds: use wq_has_sleeper() in rds_cong_map_updated() {CVE-2026-90081}
• CVE-2026-90420
  • nilfs2: fix infinite loop in nilfs_clean_segments() {CVE-2026-90420}
• CVE-2026-90116
  • ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
• CVE-2026-90070
  • tpm: st33zp24: Return zero on status read failure {CVE-2026-90070}
• CVE-2026-89845
  • scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() {CVE-2026-89845}
• CVE-2026-89944
  • ASoC: hdac_hda: Fix hlink refcount leak on component registration failure {CVE-2026-89944}
• CVE-2026-90018
  • staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() {CVE-2026-90018}
• CVE-2026-89860
  • scsi: qla2xxx: Initialize NVMe abort_work once at submission {CVE-2026-89860}
• CVE-2026-90007
  • scsi: pm8001: Use rollback index when freeing MSI-X vectors {CVE-2026-90007}
• CVE-2026-90044
  • usb: gadget: f_fs: Fix Use-After-Free in AIO error path {CVE-2026-90044}
• CVE-2026-68289
  • tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() {CVE-2026-68289}
• CVE-2026-90143
  • net: kcm: Hold RCU read lock while running BPF parser {CVE-2026-90143}
• CVE-2026-90111
  • ip6mr: do not clone dst in ip6mr_cache_report() {CVE-2026-90111}
• CVE-2026-90283
  • hugetlbfs: release subpool on fill_super failure {CVE-2026-90283}
• CVE-2026-92521
  • ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root {CVE-2026-92521}
• CVE-2026-93048
  • mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() {CVE-2026-93048}
• CVE-2026-93160
  • crypto: atmel-ecc - reject hardware ECDH without a public key {CVE-2026-93160}
• CVE-2026-93199
  • i3c: master: Do not treat master device as a duplicate target {CVE-2026-93199}
• CVE-2026-89953
  • mtd: mtdoops: free page bitmap when the backing MTD is removed {CVE-2026-89953}
• CVE-2026-89822
  • drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
• CVE-2026-89937
  • iio: chemical: sgp30: Handle IAQ thread creation failure {CVE-2026-89937}
• CVE-2026-89993
  • dmaengine: dw-edma: Initialize IRQ data before requesting IRQs {CVE-2026-89993}
• CVE-2026-89972
  • nvme: add missing SRCU grace period in error path {CVE-2026-89972}
• CVE-2026-89892
  • media: em28xx: defer audio-only extension registration {CVE-2026-89892}
• CVE-2026-90023
  • usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() {CVE-2026-90023}
• CVE-2026-90020
  • USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() {CVE-2026-90020}
• CVE-2026-90017
  • staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() {CVE-2026-90017}
• CVE-2026-90016
  • staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() {CVE-2026-90016}
• CVE-2026-90329
  • HID: synchronize input before cleaning up a failed probe {CVE-2026-90329} *…

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task Currently a use-after-free may occur if a sas_task is aborted by the upper layer before we handle the I/O completion in mpi_ssp_completion() or mpi_sata_completion(). In this case, the following are the two steps in handling those I/O completions: - Call complete() to inform the upper layer handler of completion of the I/O. - Release driver resources associated with the sas_task in pm8001_ccb_task_free() call. When complete() is called, the upper layer may free the sas_task. As such, we should not touch the associated sas_task afterwards, but we do so in the pm8001_ccb_task_free() call. Fix by swapping the complete() and pm8001_ccb_task_free() calls ordering.

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
• CVE-2024-42096: x86: stop playing stack games in profile_pc() (bsc#1228633).
• CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
• CVE-2021-47619: i40e: Fix queues reservation for XDP (bsc#1226645).
• CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743).
• CVE-2024-42124: scsi: qedf: Make qedf_execute_tmf() non-preemptible (bsc#1228705).
• CVE-2024-42223: media: dvb-frontends: tda10048: Fix integer overflow (bsc#1228726)
• CVE-2024-42119: drm/amd/display: Skip finding free audio for unknown engine_id (bsc#1228584)
• CVE-2024-42120: drm/amd/display: Check pipe offset before setting vblank (bsc#1228588)
• CVE-2024-41095: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (bsc#1228662)
• CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723).
• CVE-2024-41072: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (bsc#1228626).
• CVE-2024-41048: skmsg: Skip zero length skb in sk_msg_recvmsg (bsc#1228565).
• CVE-2024-40995: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830).
• CVE-2024-41044: ppp: reject claimed-as-LCP but actually malformed packets (bsc#1228530).
• CVE-2024-41066: ibmvnic: add tx check to prevent skb leak (bsc#1228640).
• CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
• CVE-2024-41089: drm/nouveau/dispnv04: fix null pointer dereference in (bsc#1228658)
• CVE-2024-41060: drm/radeon: check bo_va->bo is non-NULL before using it (bsc#1228567)
• CVE-2022-48829: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes (bsc#1228055).
• CVE-2022-48828: NFSD: Fix ia_size underflow (bsc#1228054).
• CVE-2022-48827: NFSD: Fix the behavior of READ near OFFSET_MAX (bsc#1228037).
• CVE-2024-41078: btrfs: qgroup: fix quota root leak after quota disable failure (bsc#1228655).
• CVE-2024-41071: wifi: mac80211: Avoid address calculations via out of bounds array indexing (bsc#1228625).
• CVE-2024-41064: powerpc/eeh: avoid possible crash when edev->pdev changes (bsc#1228599).
• CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
• CVE-2024-41081: ila: block BH in ila_output() (bsc#1228617).
• CVE-2024-40978: scsi: qedi: Fix crash while reading debugfs attribute (bsc#1227929).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228013).
• CVE-2022-48823: scsi: qedf: Fix refcount issue when LOGO is received during TMF (bsc#1228045).
• CVE-2024-41076: NFSv4: Fix memory leak in nfs4_set_security_label (bsc#1228649).
• CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
• CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
• CVE-2024-40987: drm/amdgpu: fix UBSAN warning in kv_dpm.c (bsc#1228235)
• CVE-2022-48826: drm/vc4: Fix deadlock on DSI device attach error (bsc#1227975)
• CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
• CVE-2024-41015: ocfs2: add bounds checking to ocfs2_check_dir_entry() (bsc#1228409).
• CVE-2024-41016: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (bsc#1228410).
• CVE-2024-41063: bluetooth: hci_core: cancel all works upon hci_unregister_dev() (bsc#1228580).
• CVE-2024-42070: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (bsc#1228470).
• CVE-2024-41070: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (bsc#1228581).
• CVE-2021-47405: HID: usbhid: free raw_report buffers in usbhid_stop (bsc#1225238).
• CVE-2024-40988: drm/radeon: fix UBSAN warning in kv_dpm.c (bsc#1227957)
• CVE-2024-40932: drm/exynos/vidi: fix memory leak in .get_modes()…

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
• CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
• CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743).
• CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
• CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810).
• CVE-2023-52885: SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (bsc#1227750).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228013).
• CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
• CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1224918).
• CVE-2021-47126: ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions (bsc#1221539).
• CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
• CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
• CVE-2021-47580: scsi: scsi_debug: Fix type in min_t to avoid stack OOB (bsc#1226550).
• CVE-2021-47219: scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() (bsc#1222824).
• CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
• CVE-2022-48821: misc: fastrpc: avoid double fput() on failed usercopy (bsc#1227976).
• CVE-2021-47520: can: pch_can: pch_can_rx_normal: fix use after free (bsc#1225431).
• CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).

The following non-security bugs were fixed:

• Fix spurious WARNING caused by a qxl driver patch (bsc#1227213)
• NFS: Clean up directory array handling (bsc#1226662).
• NFS: Clean up nfs_readdir_page_filler() (bsc#1226662).
• NFS: Clean up readdir struct nfs_cache_array (bsc#1226662).
• NFS: Do not discard readdir results (bsc#1226662).
• NFS: Do not overfill uncached readdir pages (bsc#1226662).
• NFS: Do not re-read the entire page cache to find the next cookie (bsc#1226662).
• NFS: Ensure contents of struct nfs_open_dir_context are consistent (bsc#1226662).
• NFS: Fix up directory verifier races (bsc#1226662).
• NFS: Further optimisations for 'ls -l' (bsc#1226662).
• NFS: More readdir cleanups (bsc#1226662).
• NFS: Reduce number of RPC calls when doing uncached readdir (bsc#1226662).
• NFS: Reduce use of uncached readdir (bsc#1226662).
• NFS: Support larger readdir buffers (bsc#1226662).
• NFS: Use the 64-bit server readdir cookies when possible (bsc#1226662).
• NFSv4.x: by default serialize open/close operations (bsc#1223863 bsc#1227362)
• X.509: Fix the parser of extended key usage for length (bsc#1218820 bsc#1226666).
• nfs: optimise readdir cache page invalidation (bsc#1226662).
• ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
• powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
• powerpc/rtas: clean up includes (bsc#1227487).

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
• CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
• CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702).
• CVE-2021-47546: Kabi fix for ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
• CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
• CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
• CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
• CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
• CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
• CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
• CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571)
• CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len (bsc#1226555).
• CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
• CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
• CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
• CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071)
• CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
• CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
• CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869)
• CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
• CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
• CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
• CVE-2023-52812: drm/amd: check num of link levels when update pcie param (bsc#1225564).
• CVE-2023-52857: drm/mediatek: Fix coverity issue with unintentional integer overflow (bsc#1225581).
• CVE-2023-52863: hwmon: (axi-fan-control) Fix possible NULL pointer dereference (bsc#1225586).
• CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
• CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
• CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647).
• CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656).
• CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659).
• CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654).
• CVE-2024-26661: drm/amd/display: Add NULL test for 'timing generator' in (bsc#1222323)
• CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
• CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328).
• CVE-2024-26802: stmmac: Clear variable when destroying workqueue (bsc#1222799).
• CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).
• CVE-2024-26961: mac802154: fix llsec key resources release in mac802154_llsec_key_del (bsc#1223652).
• CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806).
• CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
• CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
• CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
• CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836).
• CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414).
• CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ…

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
• CVE-2024-42096: x86: stop playing stack games in profile_pc() (bsc#1228633).
• CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
• CVE-2021-47619: i40e: Fix queues reservation for XDP (bsc#1226645).
• CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743).
• CVE-2024-42124: scsi: qedf: Make qedf_execute_tmf() non-preemptible (bsc#1228705).
• CVE-2024-42223: media: dvb-frontends: tda10048: Fix integer overflow (bsc#1228726).
• CVE-2024-42119: drm/amd/display: Skip finding free audio for unknown engine_id (bsc#1228584).
• CVE-2024-42120: drm/amd/display: Check pipe offset before setting vblank (bsc#1228588).
• CVE-2024-41095: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (bsc#1228662).
• CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723).
• CVE-2024-41072: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (bsc#1228626).
• CVE-2024-41048: skmsg: Skip zero length skb in sk_msg_recvmsg (bsc#1228565).
• CVE-2024-40995: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830).
• CVE-2024-41044: ppp: reject claimed-as-LCP but actually malformed packets (bsc#1228530).
• CVE-2024-41066: ibmvnic: add tx check to prevent skb leak (bsc#1228640).
• CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
• CVE-2024-41089: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (bsc#1228658).
• CVE-2024-41060: drm/radeon: check bo_va->bo is non-NULL before using it (bsc#1228567).
• CVE-2022-48829: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes (bsc#1228055).
• CVE-2022-48828: NFSD: Fix ia_size underflow (bsc#1228054).
• CVE-2022-48827: NFSD: Fix the behavior of READ near OFFSET_MAX (bsc#1228037).
• CVE-2024-41078: btrfs: qgroup: fix quota root leak after quota disable failure (bsc#1228655).
• CVE-2024-41071: wifi: mac80211: Avoid address calculations via out of bounds array indexing (bsc#1228625).
• CVE-2024-41064: powerpc/eeh: avoid possible crash when edev->pdev changes (bsc#1228599).
• CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
• CVE-2024-41081: ila: block BH in ila_output() (bsc#1228617).
• CVE-2024-40978: scsi: qedi: Fix crash while reading debugfs attribute (bsc#1227929).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228013).
• CVE-2022-48823: scsi: qedf: Fix refcount issue when LOGO is received during TMF (bsc#1228045).
• CVE-2024-41076: NFSv4: Fix memory leak in nfs4_set_security_label (bsc#1228649).
• CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
• CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
• CVE-2024-40987: drm/amdgpu: fix UBSAN warning in kv_dpm.c (bsc#1228235).
• CVE-2022-48826: drm/vc4: Fix deadlock on DSI device attach error (bsc#1227975)
• CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
• CVE-2024-41015: ocfs2: add bounds checking to ocfs2_check_dir_entry() (bsc#1228409).
• CVE-2024-41016: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (bsc#1228410).
• CVE-2024-41063: bluetooth: hci_core: cancel all works upon hci_unregister_dev() (bsc#1228580).
• CVE-2024-42070: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (bsc#1228470).
• CVE-2024-41070: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (bsc#1228581).
• CVE-2021-47405: HID: usbhid: free raw_report buffers in usbhid_stop (bsc#1225238).
• CVE-2024-40988: drm/radeon: fix UBSAN warning in kv_dpm.c (bsc#1227957).
• CVE-2024-40932: drm/exynos/vidi:…

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
• CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
• CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
• CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743).
• CVE-2024-40994: ptp: fix integer overflow in max_vclocks_store (bsc#1227829).
• CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
• CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
• CVE-2024-40989: KVM: arm64: Disassociate vcpus from redistributor region on teardown (bsc#1227823).
• CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
• CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810).
• CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
• CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
• CVE-2024-39463: 9p: add missing locking around taking dentry fid list (bsc#1227090).
• CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
• CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
• CVE-2024-35901: net: mana: Fix Rx DMA datasize and skb_over_panic (bsc#1224495).
• CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).
• CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
• CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).

The following non-security bugs were fixed:

• NFS: Do not re-read the entire page cache to find the next cookie (bsc#1226662).
• NFS: Reduce use of uncached readdir (bsc#1226662).
• NFSv4.x: by default serialize open/close operations (bsc#1226226 bsc#1223863).
• X.509: Fix the parser of extended key usage for length (bsc#1218820).
• btrfs: sysfs: update fs features directory asynchronously (bsc#1226168).
• cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801).
• jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383).
• kABI: rtas: Workaround false positive due to lost definition (bsc#1227487).
• kernel-binary: vdso: Own module_dir
• net/dcb: check for detached device before executing callbacks (bsc#1215587).
• ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
• powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
• powerpc/rtas: clean up includes (bsc#1227487).
• workqueue: Improve scalability of workqueue watchdog touch (bsc#1193454).
• workqueue: wq_watchdog_touch is always called with valid CPU (bsc#1193454).

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
• CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
• CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743).
• CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
• CVE-2023-52885: SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (bsc#1227750).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228013).
• CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
• CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1224918).
• CVE-2021-47126: ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions (bsc#1221539).
• CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
• CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
• CVE-2021-47580: scsi: scsi_debug: Fix type in min_t to avoid stack OOB (bsc#1226550).
• CVE-2021-47219: scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() (bsc#1222824).
• CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
• CVE-2021-0129: Improper access control in BlueZ may have allowed an authenticated user to potentially enable information disclosure via adjacent access (bsc#1186463).
• CVE-2020-26558: Fixed a flaw in the Bluetooth LE and BR/EDR secure pairing that could permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (bsc#1179610).
• CVE-2022-48821: misc: fastrpc: avoid double fput() on failed usercopy (bsc#1227976).
• CVE-2021-47506: nfsd: fix use-after-free due to delegation race (bsc#1225404).
• CVE-2021-47520: can: pch_can: pch_can_rx_normal: fix use after free (bsc#1225431).
• CVE-2024-26583: tls: fix use-after-free on failed backlog decryption (bsc#1220185).
• CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
• CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1226575).
• CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).

The following non-security bugs were fixed:

• Fix spurious WARNING caused by a qxl driver patch (bsc#1227213)
• X.509: Fix the parser of extended key usage for length (bsc#1218820 bsc#1226666).
• ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
• powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
• powerpc/rtas: clean up includes (bsc#1227487).

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
• CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
• CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
• CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743)
• CVE-2024-40994: ptp: fix integer overflow in max_vclocks_store (bsc#1227829).
• CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
• CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
• CVE-2024-40989: KVM: arm64: Disassociate vcpus from redistributor region on teardown (bsc#1227823).
• CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
• CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810).
• CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
• CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
• CVE-2024-39463: 9p: add missing locking around taking dentry fid list (bsc#1227090).
• CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
• CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
• CVE-2024-35901: net: mana: Fix Rx DMA datasize and skb_over_panic (bsc#1224495).
• CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).
• CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
• CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
• CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).

The following non-security bugs were fixed:

• NFS: Do not re-read the entire page cache to find the next cookie (bsc#1226662).
• NFS: Reduce use of uncached readdir (bsc#1226662).
• NFSv4.x: by default serialize open/close operations (bsc#1226226 bsc#1223863).
• X.509: Fix the parser of extended key usage for length (bsc#1218820).
• btrfs: sysfs: update fs features directory asynchronously (bsc#1226168).
• cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801).
• jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383).
• kABI: rtas: Workaround false positive due to lost definition (bsc#1227487).
• kernel-binary: vdso: Own module_dir
• net/dcb: check for detached device before executing callbacks (bsc#1215587).
• ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
• powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
• powerpc/rtas: clean up includes (bsc#1227487).
• workqueue: Improve scalability of workqueue watchdog touch (bsc#1193454).
• workqueue: wq_watchdog_touch is always called with valid CPU (bsc#1193454).

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
• CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958).
• CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
• CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702).
• CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
• CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
• CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
• CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
• CVE-2021-47546: ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
• CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
• CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
• CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
• CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
• CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
• CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
• CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
• CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
• CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
• CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
• CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571).
• CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len. (bsc#1226555).
• CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
• CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
• CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
• CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
• CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071).
• CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
• CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
• CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
• CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869).
• CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
• CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
• CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
• CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
• CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
• CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
• CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
• CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
• CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
• CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
• CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
• CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
• CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
• CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
• CVE-2023-52787: blk-mq: make…

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
• CVE-2024-42096: x86: stop playing stack games in profile_pc() (bsc#1228633).
• CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
• CVE-2021-47619: i40e: Fix queues reservation for XDP (bsc#1226645).
• CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743).
• CVE-2024-42124: scsi: qedf: Make qedf_execute_tmf() non-preemptible (bsc#1228705).
• CVE-2024-42223: media: dvb-frontends: tda10048: Fix integer overflow (bsc#1228726)
• CVE-2024-42119: drm/amd/display: Skip finding free audio for unknown engine_id (bsc#1228584)
• CVE-2024-42120: drm/amd/display: Check pipe offset before setting vblank (bsc#1228588)
• CVE-2024-41095: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (bsc#1228662)
• CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723).
• CVE-2024-41072: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (bsc#1228626).
• CVE-2024-41048: skmsg: Skip zero length skb in sk_msg_recvmsg (bsc#1228565).
• CVE-2024-40995: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830).
• CVE-2024-41044: ppp: reject claimed-as-LCP but actually malformed packets (bsc#1228530).
• CVE-2024-41066: ibmvnic: add tx check to prevent skb leak (bsc#1228640).
• CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
• CVE-2024-41089: drm/nouveau/dispnv04: fix null pointer dereference in (bsc#1228658)
• CVE-2024-41060: drm/radeon: check bo_va->bo is non-NULL before using it (bsc#1228567)
• CVE-2022-48829: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes (bsc#1228055).
• CVE-2022-48828: NFSD: Fix ia_size underflow (bsc#1228054).
• CVE-2022-48827: NFSD: Fix the behavior of READ near OFFSET_MAX (bsc#1228037).
• CVE-2024-41078: btrfs: qgroup: fix quota root leak after quota disable failure (bsc#1228655).
• CVE-2024-41071: wifi: mac80211: Avoid address calculations via out of bounds array indexing (bsc#1228625).
• CVE-2024-41064: powerpc/eeh: avoid possible crash when edev->pdev changes (bsc#1228599).
• CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
• CVE-2024-41081: ila: block BH in ila_output() (bsc#1228617).
• CVE-2024-40978: scsi: qedi: Fix crash while reading debugfs attribute (bsc#1227929).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228013).
• CVE-2022-48823: scsi: qedf: Fix refcount issue when LOGO is received during TMF (bsc#1228045).
• CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
• CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
• CVE-2024-40987: drm/amdgpu: fix UBSAN warning in kv_dpm.c (bsc#1228235)
• CVE-2022-48826: drm/vc4: Fix deadlock on DSI device attach error (bsc#1227975)
• CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
• CVE-2024-41015: ocfs2: add bounds checking to ocfs2_check_dir_entry() (bsc#1228409).
• CVE-2024-41016: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (bsc#1228410).
• CVE-2024-41063: bluetooth: hci_core: cancel all works upon hci_unregister_dev() (bsc#1228580).
• CVE-2024-42070: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (bsc#1228470).
• CVE-2024-41070: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (bsc#1228581).
• CVE-2021-47405: HID: usbhid: free raw_report buffers in usbhid_stop (bsc#1225238).
• CVE-2024-40988: drm/radeon: fix UBSAN warning in kv_dpm.c (bsc#1227957)
• CVE-2024-40932: drm/exynos/vidi: fix memory leak in .get_modes() (bsc#1227828)
• CVE-2021-47403: ipack: ipoctal: fix module reference leak…

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
• CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
• CVE-2021-47186: ipc: check for null after calling kmemdup (bsc#1222702).
• CVE-2021-47546: Kabi fix for ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
• CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
• CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
• CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
• CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
• CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
• CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
• CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571)
• CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len (bsc#1226555).
• CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
• CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
• CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
• CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071)
• CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
• CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
• CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869)
• CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
• CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
• CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
• CVE-2023-52812: drm/amd: check num of link levels when update pcie param (bsc#1225564).
• CVE-2023-52857: drm/mediatek: Fix coverity issue with unintentional integer overflow (bsc#1225581).
• CVE-2023-52863: hwmon: (axi-fan-control) Fix possible NULL pointer dereference (bsc#1225586).
• CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
• CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
• CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647).
• CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656).
• CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659).
• CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654).
• CVE-2024-26661: drm/amd/display: Add NULL test for 'timing generator' in (bsc#1222323)
• CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
• CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328).
• CVE-2024-26802: stmmac: Clear variable when destroying workqueue (bsc#1222799).
• CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).
• CVE-2024-26961: mac802154: fix llsec key resources release in mac802154_llsec_key_del (bsc#1223652).
• CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806).
• CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
• CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
• CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
• CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836).
• CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414).
• CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ…

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2020-26558: Fixed a flaw in the Bluetooth LE and BR/EDR secure pairing that could permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (bsc#1179610).
• CVE-2021-0129: Improper access control in BlueZ may have allowed an authenticated user to potentially enable information disclosure via adjacent access (bsc#1186463).
• CVE-2021-47126: ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions (bsc#1221539).
• CVE-2021-47219: scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() (bsc#1222824).
• CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1224918).
• CVE-2021-47506: nfsd: fix use-after-free due to delegation race (bsc#1225404).
• CVE-2021-47520: can: pch_can: pch_can_rx_normal: fix use after free (bsc#1225431).
• CVE-2021-47580: scsi: scsi_debug: Fix type in min_t to avoid stack OOB (bsc#1226550).
• CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
• CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1226575).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228013).
• CVE-2022-48821: misc: fastrpc: avoid double fput() on failed usercopy (bsc#1227976).
• CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).
• CVE-2023-52885: SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (bsc#1227750).
• CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
• CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
• CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
• CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
• CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
• CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810).
• CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
• CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
• CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
• CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
• CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743).

The following non-security bugs were fixed:

• Fix spurious WARNING caused by a qxl driver patch (bsc#1227213)
• nfs: Clean up directory array handling (bsc#1226662).
• nfs: Clean up nfs_readdir_page_filler() (bsc#1226662).
• nfs: Clean up readdir struct nfs_cache_array (bsc#1226662).
• nfs: Do not discard readdir results (bsc#1226662).
• nfs: Do not overfill uncached readdir pages (bsc#1226662).
• nfs: Do not re-read the entire page cache to find the next cookie (bsc#1226662).
• nfs: Ensure contents of struct nfs_open_dir_context are consistent (bsc#1226662).
• nfs: Fix up directory verifier races (bsc#1226662).
• nfs: Further optimisations for 'ls -l' (bsc#1226662).
• nfs: More readdir cleanups (bsc#1226662).
• nfs: Reduce number of RPC calls when doing uncached readdir (bsc#1226662).
• nfs: Reduce use of uncached readdir (bsc#1226662).
• nfs: Support larger readdir buffers (bsc#1226662).
• nfs: Use the 64-bit server readdir cookies when possible (bsc#1226662).
• nfs: optimise readdir cache page invalidation (bsc#1226662).
• nfsv4.x: by default serialize open/close operations (bsc#1223863 bsc#1227362)
• ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
• powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
• powerpc/rtas: clean up includes (bsc#1227487).
• x.509: Fix the parser of extended key usage for length (bsc#1218820, bsc#1226666).

This update for the Linux Kernel 4.12.14-122_216 fixes several issues.

The following security issues were fixed:

• CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204).
• CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228017).
• CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640).
• CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)

This update for the Linux Kernel 4.12.14-122_222 fixes several issues.

The following security issues were fixed:

• CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204).
• CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228017).
• CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640).

This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues.

The following security issues were fixed:

• CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204).
• CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
• CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228017).
• CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640).
• CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)

This update for the Linux Kernel 4.12.14-122_219 fixes several issues.

The following security issues were fixed:

• CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204).
• CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228017).
• CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640).

This update for the Linux Kernel 4.12.14-122_201 fixes several issues.

The following security issues were fixed:

• CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204).
• CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228017).
• CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640).
• CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)

This update for the Linux Kernel 5.3.18-150300_59_150 fixes several issues.

The following security issues were fixed:

• CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204).
• CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
• CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228017).
• CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640).

This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues.

The following security issues were fixed:

• CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204).
• CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
• CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228017).
• CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640).
• CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)

This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues.

The following security issues were fixed:

• CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204).
• CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).
• CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228017).
• CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640).