CVE-2022-48938

CDC-NCM: avoid overflow in sanity checking

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

CDC-NCM: avoid overflow in sanity checking

A broken device may give an extreme offset like 0xFFF0 and a reasonable length for a fragment. In the sanity check as formulated now, this will create an integer overflow, defeating the sanity check. Both offset and offset + len need to be checked in such a manner that no overflow can occur. And those quantities should be unsigned.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.21%Up 0.2 points since Aug 22, 2024

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

CDC-NCM: avoid overflow in sanity checking

Record: CVE-2022-48938
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-190
Updated: 2026-11-02

CVE List No score

CDC-NCM: avoid overflow in sanity checking

In the Linux kernel, the following vulnerability has been resolved:

CDC-NCM: avoid overflow in sanity checking

Record: CVE-2022-48938
Updated: 2026-11-02

EUVDEUVD-2022-53817 No score

In the Linux kernel, the following vulnerability has been resolved:

CDC-NCM: avoid overflow in sanity checking

Record: EUVD-2022-53817
Updated: 2026-11-02

GitHub AdvisoriesGHSA-33fw-34vg-hgjh 5.5

In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in...

In the Linux kernel, the following vulnerability has been resolved:

CDC-NCM: avoid overflow in sanity checking

Record: GHSA-33fw-34vg-hgjh
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-190
Updated: 2026-11-02

OSVDEBIAN-CVE-2022-48938 5.5

In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset like 0xFFF0 and a reasonable length for a fragment. In the sanity check as formulated now, this will create an integer overflow, defeating the sanity check. Both offset and offset + len need to be checked in such a manner that no overflow can occur. And those quantities should be unsigned.

Record: DEBIAN-CVE-2022-48938
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-03

OSVUBUNTU-CVE-2022-48938 5.2

Record: UBUNTU-CVE-2022-48938
CVSS 4.0: 5.2 MediumCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-06

Show 26 moreShow less

OSVCLSA-2024-1733142550 No score

Fix of 13 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52614
- time: Introduce jiffies64_to_msecs()
- PM / devfreq: Modify the indentation of trans_stat sysfs for readability
- PM / devfreq: Do not show statistics if it's not ready.
- PM / devfreq: Fix buffer overflow in trans_stat_show
Bionic update: upstream stable patchset 2019-12-20 (LP: #1857158) // CVE- url: https://ubuntu.com/security/CVE-2023-52614
- PM / devfreq: Lock devfreq in trans_stat_show
CVE-url: https://ubuntu.com/security/CVE-2024-42240
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation
CVE-url: https://ubuntu.com/security/CVE-2023-52578
- net: bridge: use DEV_STATS_INC()
CVE-url: https://ubuntu.com/security/CVE-2022-48938
- CDC-NCM: avoid overflow in sanity checking
CVE-url: https://ubuntu.com/security/CVE-2024-43854
- block: initialize integrity buffer to zero before writing it to media
CVE-url: https://ubuntu.com/security/CVE-2024-38596
- net: sock: move ->sk_shutdown out of bitfields.
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
CVE-url: https://ubuntu.com/security/CVE-2024-35877
- mm: introduce page_needs_cow_for_dma() for deciding whether cow
- x86/mm/pat: fix VM_PAT handling in COW mappings
CVE-url: https://ubuntu.com/security/CVE-2023-52502
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
CVE-url: https://ubuntu.com/security/CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
CVE-url: https://ubuntu.com/security/CVE-2024-26668
- netfilter: nft_limit: allow to invert matching criteria
- netfilter: limit: use per-rule spinlock to improve the scalability
- netfilter: nf_tables: Fix nft limit burst handling
- netfilter: nft_limit: reject configurations that cause integer overflow
Bionic update: upstream stable patchset 2019-07-23 (LP: #1837664) // CVE- url: https://ubuntu.com/security/CVE-2024-26668
- compiler.h: enable builtin overflow checkers and add fallback code
Bionic update: upstream stable patchset 2018-12-12 (LP: #1808185) // CVE- url: https://ubuntu.com/security/CVE-2024-26668
- netfilter: nft_limit: fix packet ratelimiting
CVE-url: https://ubuntu.com/security/CVE-2024-27397
- netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: annotate data-races around element expiration
- netfilter: nf_tables: support timeouts larger than 23 days
CVE-url: https://ubuntu.com/security/CVE-2024-50036
- net: do not delay dst_entries_add() in dst_release()
CVE-url: https://ubuntu.com/security/CVE-2024-50067
- uprobe: avoid out-of-bounds memory access of fetching args
Miscellaneous Ubuntu changes
- [Packaging]: keep only amd64 architecture
Miscellaneous upstream changes
- getabis: use ESM version of debian.master/etc/getabis

Record: CLSA-2024-1733142550
Updated: 2026-11-02

OSVCLSA-2024-1733142968 No score

Fix of 13 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52614
- time: Introduce jiffies64_to_msecs()
- PM / devfreq: Modify the indentation of trans_stat sysfs for readability
- PM / devfreq: Do not show statistics if it's not ready.
- PM / devfreq: Fix buffer overflow in trans_stat_show
Bionic update: upstream stable patchset 2019-12-20 (LP: #1857158) // CVE- url: https://ubuntu.com/security/CVE-2023-52614
- PM / devfreq: Lock devfreq in trans_stat_show
CVE-url: https://ubuntu.com/security/CVE-2024-42240
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation
CVE-url: https://ubuntu.com/security/CVE-2023-52578
- net: bridge: use DEV_STATS_INC()
CVE-url: https://ubuntu.com/security/CVE-2022-48938
- CDC-NCM: avoid overflow in sanity checking
CVE-url: https://ubuntu.com/security/CVE-2024-43854
- block: initialize integrity buffer to zero before writing it to media
CVE-url: https://ubuntu.com/security/CVE-2024-38596
- net: sock: move ->sk_shutdown out of bitfields.
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
CVE-url: https://ubuntu.com/security/CVE-2024-35877
- mm: introduce page_needs_cow_for_dma() for deciding whether cow
- x86/mm/pat: fix VM_PAT handling in COW mappings
CVE-url: https://ubuntu.com/security/CVE-2023-52502
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
CVE-url: https://ubuntu.com/security/CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
CVE-url: https://ubuntu.com/security/CVE-2024-26668
- netfilter: nft_limit: allow to invert matching criteria
- netfilter: limit: use per-rule spinlock to improve the scalability
- netfilter: nf_tables: Fix nft limit burst handling
- netfilter: nft_limit: reject configurations that cause integer overflow
Bionic update: upstream stable patchset 2019-07-23 (LP: #1837664) // CVE- url: https://ubuntu.com/security/CVE-2024-26668
- compiler.h: enable builtin overflow checkers and add fallback code
Bionic update: upstream stable patchset 2018-12-12 (LP: #1808185) // CVE- url: https://ubuntu.com/security/CVE-2024-26668
- netfilter: nft_limit: fix packet ratelimiting
CVE-url: https://ubuntu.com/security/CVE-2024-27397
- netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: annotate data-races around element expiration
- netfilter: nf_tables: support timeouts larger than 23 days
CVE-url: https://ubuntu.com/security/CVE-2024-50036
- net: do not delay dst_entries_add() in dst_release()
CVE-url: https://ubuntu.com/security/CVE-2024-50067
- uprobe: avoid out-of-bounds memory access of fetching args
Miscellaneous Ubuntu changes
- [Packaging]: keep only amd64 architecture
Miscellaneous upstream changes
- getabis: use ESM version of debian.master/etc/getabis

Record: CLSA-2024-1733142968
Updated: 2026-11-02

OSVCLSA-2024-1733483766 No score

Fix of 9 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-49992
- drm: remove all control node code
- drm: add managed resources tied to drm_device
- drm: Set final_kfree in drm_dev_alloc
- drm/plane: add drmm_universal_plane_alloc()
- drm: Handle dev->unique with drmm_
- drm: Use drmm_ for drm_dev_init cleanup
- drm: manage drm_minor cleanup with drmm_
- drm/stm: Avoid use-after-free issues with crtc and plane
CVE-url: https://ubuntu.com/security/CVE-2023-52531
- wifi: iwlwifi: mvm: Fix a memory corruption issue
CVE-url: https://ubuntu.com/security/CVE-2024-35877
- mm: introduce page_needs_cow_for_dma() for deciding whether cow
- x86/mm/pat: fix VM_PAT handling in COW mappings
CVE-url: https://ubuntu.com/security/CVE-2023-52578
- net: bridge: use DEV_STATS_INC()
CVE-url: https://ubuntu.com/security/CVE-2024-42240
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation
CVE-url: https://ubuntu.com/security/CVE-2022-48938
- CDC-NCM: avoid overflow in sanity checking
CVE-url: https://ubuntu.com/security/CVE-2023-52502
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
CVE-url: https://ubuntu.com/security/CVE-2023-52614
- time: Introduce jiffies64_to_msecs()
- PM / devfreq: Fix buffer overflow in trans_stat_show
CVE-url: https://ubuntu.com/security/CVE-2024-50067
- uprobe: avoid out-of-bounds memory access of fetching args

Record: CLSA-2024-1733483766
Updated: 2026-11-02

OSVCLSA-2024-1733483945 No score

Fix of 9 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-49992
- drm: remove all control node code
- drm: add managed resources tied to drm_device
- drm: Set final_kfree in drm_dev_alloc
- drm/plane: add drmm_universal_plane_alloc()
- drm: Handle dev->unique with drmm_
- drm: Use drmm_ for drm_dev_init cleanup
- drm: manage drm_minor cleanup with drmm_
- drm/stm: Avoid use-after-free issues with crtc and plane
CVE-url: https://ubuntu.com/security/CVE-2023-52531
- wifi: iwlwifi: mvm: Fix a memory corruption issue
CVE-url: https://ubuntu.com/security/CVE-2024-35877
- mm: introduce page_needs_cow_for_dma() for deciding whether cow
- x86/mm/pat: fix VM_PAT handling in COW mappings
CVE-url: https://ubuntu.com/security/CVE-2023-52578
- net: bridge: use DEV_STATS_INC()
CVE-url: https://ubuntu.com/security/CVE-2024-42240
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation
CVE-url: https://ubuntu.com/security/CVE-2022-48938
- CDC-NCM: avoid overflow in sanity checking
CVE-url: https://ubuntu.com/security/CVE-2023-52502
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
CVE-url: https://ubuntu.com/security/CVE-2023-52614
- time: Introduce jiffies64_to_msecs()
- PM / devfreq: Fix buffer overflow in trans_stat_show
CVE-url: https://ubuntu.com/security/CVE-2024-50067
- uprobe: avoid out-of-bounds memory access of fetching args

Record: CLSA-2024-1733483945
Updated: 2026-11-02

OSVCLSA-2026-1780516677 No score

kernel: Fix of 135 CVEs

atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
ALSA: usb-audio: Use the right limit for PCM OOB check
ALSA: usb-audio: Prevent excessive number of frames {CVE-2026-23208}
xen/privcmd: fix double free via VMA splitting {CVE-2026-31787}
cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path {CVE-2026-43328}
cpufreq: governor: Free dbs_data directly when gov->init() fails {CVE-2026-43328}
rcu: Fix rcu_read_unlock() deadloop due to softirq
rcu: Fix racy re-initialization of irq_work causing hangs
RDMA/efa: Fix possible deadlock {CVE-2026-31493}
RDMA/efa: Fix use of completion ctx after free {CVE-2026-31493}
RDMA/efa: Improve admin completion context state machine {CVE-2026-31493}
RDMA/efa: Check stored completion CTX command ID with received one {CVE-2026-31493}
RDMA/efa: Extend admin timeout error print
RDMA/efa: Properly handle unexpected AQ completions {CVE-2026-31493}
rcu: Fix rcu_read_unlock() deadloop due to IRQ work {CVE-2025-39744}
netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455}
rtnetlink: Allocate vfinfo size for VF GUIDs when supported {CVE-2025-22075}
kernel/printk/index.c: fix memory leak with using debugfs_lookup() {CVE-2023-53402}
wifi: iwlwifi: don't warn when if there is a FW error {CVE-2025-38096}
md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() {CVE-2023-53210}
exfat: fix the infinite loop in exfat_readdir() {CVE-2024-57940}
af_netlink: Fix shift out of bounds in group mask calculation {CVE-2022-49197}
xfrm_user: fix info leak in build_mapping() {CVE-2026-43089}
udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946}
efi: Do not import certificates from UEFI Secure Boot for T2 Macs {CVE-2022-49357}
kernel/resource: fix kfree() of bootmem memory again {CVE-2022-49190}
smb: client: fix warning in cifs_smb3_do_mount() {CVE-2023-53230}
sctp: Fix null-ptr-deref in reuseport_add_sock(). {CVE-2024-44935}
RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages {CVE-2024-50208}
drm/amdgpu: avoid using null object of framebuffer {CVE-2024-41093}
firmware: cs_dsp: Return error if block header overflows file {CVE-2024-42238}
ata: libata-sff: Ensure that we cannot write outside the allocated buffer {CVE-2025-21738}
net: hinic: fix memory leak when reading function table {CVE-2022-50438}
device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() {CVE-2022-49752}
libceph: fix race between delayed_work() and ceph_monc_stop() {CVE-2024-42232}
usbnet: fix memory leak in error case {CVE-2022-49657}
hwmon: (w83791d) Convert macros to functions to avoid TOCTOU {CVE-2025-71111}
seccomp: Move copy_seccomp() to no failure path. {CVE-2022-50661}
net/mlx5: fs, lock FTE when checking if active {CVE-2024-53121}
nvme-pci: fix freeing of the HMB descriptor table {CVE-2024-56756}
leds: class: Protect brightness_show() with led_cdev->led_access mutex {CVE-2024-56587}
bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener {CVE-2023-52986}
RDMA/uverbs: Prevent integer overflow issue {CVE-2024-57890}
sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT {CVE-2026-23125}
tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() {CVE-2022-49800}
kprobes: Fix check for probe enabled in kill_kprobe() {CVE-2022-50266}
NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 {CVE-2024-26870}
i915/perf: Fix NULL deref bugs with drm_dbg() calls {CVE-2023-52788}
can: mcp251x: fix deadlock in error path of mcp251x_open {CVE-2026-23357}
regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode {CVE-2022-50558}
wifi: cfg80211: Set correct chandef when starting CAC {CVE-2024-49937}
netfilter: nf_tables: prevent nf_skb_duplicated corruption {CVE-2024-49952}
can: isotp: fix potential CAN frame reception race in isotp_rcv() {CVE-2022-48830}
bpf: Fix…

Record: CLSA-2026-1780516677
Updated: 2026-11-02

OSVCLSA-2026-1786824415 No score

kernel: Fix of 82 CVEs

nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
wifi: rtlwifi: pci: wait for firmware loading before releasing memory
wifi: rtlwifi: fix memory leaks and invalid access at probe error path {CVE-2024-58063}
tracing: Fix bad hist from corrupting named_triggers list {CVE-2025-21899}
PM / devfreq: Fix leak in devfreq_dev_release() {CVE-2023-53518}
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization {CVE-2025-38725}
net/sched: Fix backlog accounting in qdisc_dequeue_internal {CVE-2025-37992}
nfsd: decrease sc_count directly if fail to queue dl_recall {CVE-2025-22025}
net: usb: asix_devices: add phy_mask for ax88772 mdio bus {CVE-2025-38725}
nfsd: put dl_stid if fail to queue dl_recall {CVE-2025-22025}
rtnetlink: add missing netlink_ns_capable() check for peer netns {CVE-2026-31692}
mm: add smp_rmb() in pfn_swap_entry_to_page() to pair with THP split {CVE-2026-31466}
net_sched: Flush gso_skb list too during ->change() {CVE-2025-37992}
io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() {CVE-2025-38106}
Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
mtd: rawnand: serialize lock/unlock against other NAND operations {CVE-2026-23434}
be2net: fix potential memory leak in be_xmit() {CVE-2024-50167}
net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data {CVE-2024-53058}
Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet {CVE-2024-55916}
idpf: detach and close netdevs while handling a reset {CVE-2026-22981}
ice: fix devlink reload call trace {CVE-2026-23104}
nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec {CVE-2026-23112}
bpf: Prevent tailcall infinite loop caused by freplace {CVE-2024-47794}
crypto: pcrypt - restore callback for non-parallel fallback
crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY {CVE-2024-56690}
tracing/histograms: Allow variables to have some modifiers {CVE-2023-53093}
intel_th: fix device leak on output open() {CVE-2026-23091}
RDMA/mlx5: Fix implicit ODP hang on parent deregistration
RDMA/mlx5: Fix implicit ODP use after free {CVE-2025-21714}
net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping {CVE-2025-38126}
KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer {CVE-2025-71104}
i2c: s3c24xx: check the size of the SMBUS message before using it {CVE-2026-31627}
scsi: qla2xxx: Free sp in error path to fix system crash {CVE-2025-71232}
nfc: llcp: add missing return after LLCP_CLOSED checks {CVE-2026-31629}
gfs2: No more self recovery {CVE-2025-38659}
hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() {CVE-2022-50334}
tracing: Prevent bad count for tracing_cpumask_write {CVE-2024-56763}
CDC-NCM: avoid overflow in sanity checking {CVE-2022-48938}
cxl: Fix race of nvdimm_bus object when creating nvdimm objects {CVE-2026-23348}
KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock {CVE-2026-31592}
sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting {CVE-2026-23371}
md/raid1,raid10: don't ignore IO flags {CVE-2025-22125}
mm: slub: avoid wake up kswapd in set_track_prepare {CVE-2025-39843}
iommu/vt-d: Disallow dirty tracking if incoherent page walk {CVE-2025-40058}
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() {CVE-2025-23144}
PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 {CVE-2025-21831}
drm/amd/display: Add null pointer check for get_first_active_display() {CVE-2025-38362}
pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map {CVE-2022-49832}
spi: fsl-qspi: Simplify probe error handling using managed API
spi: fsl-qspi: Fix double cleanup in probe error path
spi:…

Record: CLSA-2026-1786824415
Updated: 2026-11-02

OSV No score

CDC-NCM: avoid overflow in sanity checking

In the Linux kernel, the following vulnerability has been resolved:

CDC-NCM: avoid overflow in sanity checking

Record: CVE-2022-48938
Updated: 2026-11-02

OSVSUSE-SU-2024:3189-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-43907: drm/amdgpu/pm: fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787).
CVE-2024-43905: drm/amd/pm: fix the null pointer dereference for vega10_hwmgr (bsc#1229784).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43879: wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482).
CVE-2024-43872: RDMA/hns: Fix soft lockup under heavy CEQE load (bsc#1229489).
CVE-2024-43871: devres: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490).
CVE-2024-43866: net/mlx5: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-43863: drm/vmwgfx: Fix a deadlock in dma buf fence polling (bsc#1229497).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2024-43856: dma: fix call order in dmam_free_coherent (bsc#1229346).
CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media (bsc#1229345)
CVE-2024-43839: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
CVE-2024-43831: media: mediatek: vcodec: Handle invalid decoder vsi (bsc#1229309).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
CVE-2024-42322: ipvs: properly dereference pe in ip_vs_add_service (bsc#1229347)
CVE-2024-42312: sysctl: always initialize i_uid/i_gid (bsc#1229357)
CVE-2024-42310: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (bsc#1229358).
CVE-2024-42309: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (bsc#1229359).
CVE-2024-42301: dev/parport: fix the array out-of-bounds risk (bsc#1229407).
CVE-2024-42285: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (bsc#1229381).
CVE-2024-42284: tipc: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
CVE-2024-42281: bpf: Fix a segment issue when downgrading gso_size (bsc#1229386).
CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400)
CVE-2024-42259: drm/i915/gem: fix Virtual Memory mapping boundaries calculation (bsc#1229156).
CVE-2024-42246: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).
CVE-2024-42244: usb: serial: mos7840: fix crash on resume (bsc#1228967).
CVE-2024-42236: usb: gadget: configfs: prevent OOB read/write in usb_string_copy() (bsc#1228964).
CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959)
CVE-2024-42228: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (bsc#1228667).
CVE-2024-42226: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
CVE-2024-42162: gve: Account for stopped queues when reading NIC stats (bsc#1228706).
CVE-2024-42158: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-42157: s390/pkey: Wipe sensitive data on failure (bsc#1228727).
CVE-2024-42155: s390/pkey: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42148: bnx2x: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).
CVE-2024-42110: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501).
CVE-2024-42106: inet_diag: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493).
CVE-2024-42101: drm/nouveau: fix null pointer dereference in…

Record: SUSE-SU-2024:3189-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
CVE-2024-44939: fix null ptr deref in dtInsertEntry (bsc#1229820).
CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-27016: Validate pppoe header (bsc#1223807).
CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639).
CVE-2023-52581: Fix memleak when more than 255…

Record: SUSE-SU-2024:3190-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3209-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
CVE-2024-44939: Fix null ptr deref in dtInsertEntry (bsc#1229820).
CVE-2024-41087: Fix double free on error (bsc#1228466).
CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-26812: struct virqfd kABI workaround (bsc#1222808).
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-27016: Validate pppoe header (bsc#1223807).
CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639).
CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).…

Record: SUSE-SU-2024:3209-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3227-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41062: bluetooth/l2cap: sync sock recv cb and release (bsc#1228576).
CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400)
CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959)
CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
CVE-2024-41009: bpf: Fix overrunning reservations in ringbuf (bsc#1228020).

The following non-security bugs were fixed:

Bluetooth: L2CAP: Fix deadlock (git-fixes).
mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
nvme_core: scan namespaces asynchronously (bsc#1224105).

Record: SUSE-SU-2024:3227-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3251-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579).
CVE-2024-35933: Fixed build regression (bsc#1224640).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2024-43863: Fix a deadlock in dma buf fence polling (bsc#1229497)
CVE-2024-41087: Fix double free on error (bsc#1228466).
CVE-2024-43907: Fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787).
CVE-2024-43905: Fix the null pointer dereference for vega10_hwmgr (bsc#1229784).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2022-48910: Ensure we call ipv6_mc_down() at most once (bsc#1229632)
CVE-2023-52893: Fix null-deref in gsmi_get_variable (bsc#1229535)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2022-48875: Initialize struct pn533_out_arg properly (bsc#1229516).
CVE-2023-52907: Wait for out_urb's completion in pn533_usb_send_frame() (bsc#1229526).
CVE-2024-43871: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490)
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-43872: Fix soft lockup under heavy CEQE load (bsc#1229489)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
CVE-2024-42236: Prevent OOB read/write in usb_string_copy() (bsc#1228964).
CVE-2024-42244: Fix crash on resume (bsc#1228967).
CVE-2024-43879: Handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578).
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-41012: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290).
CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727).
CVE-2021-47341: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (bsc#1224923).
CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
CVE-2022-48769: Avoid EFIv2 runtime services on Apple x86 machines (bsc#1226629).
CVE-2024-43856: Fix call order in dmam_free_coherent (bsc#1229346).
CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
CVE-2024-40984: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (bsc#1227820).
CVE-2024-26677: Blacklist e7870cf13d20 (' Fix delayed ACKs to not set the reference serial number') (bsc#1222387)
CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357)
CVE-2024-42310: Fix null pointer dereference in…

Record: SUSE-SU-2024:3251-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3252-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579).
CVE-2024-35933: Fixed a build regression (bsc#1224640).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2024-43863: Fix a deadlock in dma buf fence polling (bsc#1229497)
CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
CVE-2024-43907: Fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787).
CVE-2024-43905: Fix the null pointer dereference for vega10_hwmgr (bsc#1229784).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2022-48910: Ensure we call ipv6_mc_down() at most once (bsc#1229632)
CVE-2023-52893: Fix null-deref in gsmi_get_variable (bsc#1229535)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2022-48875: Initialize struct pn533_out_arg properly (bsc#1229516).
CVE-2023-52907: Wait for out_urb's completion in pn533_usb_send_frame() (bsc#1229526).
CVE-2024-43871: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490)
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-43872: Fix soft lockup under heavy CEQE load (bsc#1229489)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
CVE-2024-42236: Prevent OOB read/write in usb_string_copy() (bsc#1228964).
CVE-2024-42244: Fix crash on resume (bsc#1228967).
CVE-2024-43879: Handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578).
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-41012: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727 CVE-2024-42157 git-fixes).
CVE-2021-47341: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (bsc#1224923).
CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
CVE-2022-48769: Avoid EFIv2 runtime services on Apple x86 machines (bsc#1226629).
CVE-2024-43856: Fix call order in dmam_free_coherent (bsc#1229346).
CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
CVE-2024-40984: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (bsc#1227820).
CVE-2024-26677: Blacklist e7870cf13d20 ('rxrpc: Fix delayed ACKs to not set the reference serial number') (bsc#1222387)
CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357) -…

Record: SUSE-SU-2024:3252-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3408-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400)
CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959)
CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
CVE-2024-41009: Fix overrunning reservations in ringbuf (bsc#1228020).
CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).

The following non-security bugs were fixed:

Bluetooth: L2CAP: Fix deadlock (git-fixes).
mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
Revert 'mm: prevent derefencing NULL ptr in pfn_section_valid()' (bsc#1230413).
Revert 'mm, kmsan: fix infinite recursion due to RCU critical section' (bsc#1230413).
Revert 'mm/sparsemem: fix race in accessing memory_section->usage' (bsc#1230413).
nvme_core: scan namespaces asynchronously (bsc#1224105).

Record: SUSE-SU-2024:3408-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3483-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2024-36270: Fix reference in patches.suse/netfilter-tproxy-bail-out-if-IP-has-been-disabled-on.patch (bsc#1226798)
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
CVE-2024-44939: Fix null ptr deref in dtInsertEntry (bsc#1229820).
CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-27016: Validate pppoe header (bsc#1223807). -…

Record: SUSE-SU-2024:3483-1
Updated: 2026-11-02

OSVUSN-7121-1 No score

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities