CVE-2024-25742

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux SIG Cloud 8.10 Release Notes linked from the References section.

In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. This affects AMD SEV-SNP and AMD SEV-ES.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
• CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743)

Bug Fix(es):

• ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:AlmaLinux-27009)
• mm/mglru: fix underprotected page cache (JIRA:AlmaLinux-29235)
• [EMR] [TBOOT OS] SUT could not go to S3 state with AlmaLinux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:AlmaLinux-29673)
• system hangs completely - NMI not possible (JIRA:AlmaLinux-30678)
• ice 0000:6f:00.0: PTP failed to get time (JIRA:AlmaLinux-30110)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

• af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
• netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668}
• libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534}
• bpf: Fix partial dynptr stack slot reads/writes {CVE-2023-39191}
• ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
• ima: define ima_max_digest_data struct without a flexible array variable
• ima: detect changes to the backing overlay file
• tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}
• tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux {CVE-2023-6546}
• tty: n_gsm: fix restart handling via CLD command
• r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586}
• netfilter: tproxy: bail out if IP has been disabled on the device {CVE-2024-36270}
• tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}
• Bluetooth: Fix double free in hci_conn_cleanup {CVE-2023-28464}
• fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super {CVE-2024-0841}
• net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}
• tipc: fix UAF in error path {CVE-2024-36886}
• Bluetooth: af_bluetooth: Fix deadlock {CVE-2024-26886}
• Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
• dma-mapping: benchmark: handle NUMA_NO_NODE correctly {CVE-2024-39277}
• net/mlx5e: Prevent deadlock while disabling aRFS {CVE-2024-27014}
• net/mlx5e: Introduce flow steering API {CVE-2024-27014}
• x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
• x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742}
• x86: Introduce ia32_enabled() {CVE-2024-25742}
• x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742}
• x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742}
• RDMA/srpt: Support specifying the srpt_service_guid parameter {CVE-2024-26744}
• platform/x86: think-lmi: Fix reference leak {CVE-2023-52520}
• USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command {CVE-2024-27059}
• fat: fix uninitialized field in nostale filehandles {CVE-2024-26973}
• usb: xhci: Add error handling in xhci_map_urb_for_dma {CVE-2024-26964}
• wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete {CVE-2024-26897}
• wifi: mac80211: fix race condition on enabling fast-xmit {CVE-2024-26779}
• RDMA/qedr: Fix qedr_create_user_qp error flow {CVE-2024-26743}
• wifi: iwlwifi: fix a memory corruption {CVE-2024-26610}
• x86/fpu: Stop relying on userspace for info to fault in xsave buffer {CVE-2024-26603}
• wifi: rt2x00: restart beacon queue when hardware reset {CVE-2023-52595}
• wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
• net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg {CVE-2023-52528}
• RDMA/siw: Fix connection failure handling {CVE-2023-52513}
• usb: hub: Guard against accesses to uninitialized BOS descriptors {CVE-2023-52477}
• tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc {CVE-2021-47185}
• sctp: fail if no bound addresses can be used for a given scope {CVE-2023-1074}
• memcg: enable accounting for file lock caches {CVE-2022-0480}
• net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() {CVE-2023-6176}
• RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872}
• drm/amd/display: Atom Integrated System Info v2_2 for DCN35 {CVE-2024-36897}
• net/mlx5e: fix a potential double-free in fs_any_create_groups {CVE-2023-52667}
• ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() {CVE-2024-36902}
• ipv6: prevent NULL dereference in ip6_output() {CVE-2024-36901}
• vt: fix memory overlapping when deleting chars in the buffer {CVE-2022-48627}
• hwmon: (coretemp) Fix out-of-bounds memory access {CVE-2024-26664}
• i2c: Fix a potential use after free {CVE-2019-25162}
• net/smc: fix…

• netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
• x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
• bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
• selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161}
• pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
• pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940}
• net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
• wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
• ata: libata-core: Fix double free on error {CVE-2024-41087}
• drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
• drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
• net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
• drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
• net/sched: flower: Fix chain template offload {CVE-2024-26669}
• ipv6: Remove extra counter pull before gc {CVE-2023-52340}
• ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
• net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340}
• net: add a route cache full diagnostic message {CVE-2023-52340}
• Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
• tcp_metrics: validate source addr length {CVE-2024-42154}
• net: fix out-of-bounds access in ops_init {CVE-2024-36883}
• tap: add missing verification for short frame {CVE-2024-41090}
• tun: add missing verification for short frame {CVE-2024-41091}
• iommu: Fix potential use-after-free during probe {CVE-2022-48796}
• nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}
• nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789}
• nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788}
• ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
• ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
• ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
• hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698}
• ubi: Check for too small LEB size in VTBL code {CVE-2024-25739}
• scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811}
• arp: Prevent overflow in arp_req_get(). {CVE-2024-26733}
• SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623}
• ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622}
• pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619}
• wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
• drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486}
• net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743}
• tracing: Restructure trace_clock_global() to never block {CVE-2021-46939}
• tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614}
• drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
• gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
• gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
• gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570}
• gfs2: Wake up when sd_glock_disposal becomes zero {CVE-2024-38570}
• gfs2: Remove ill-placed consistency check {CVE-2024-38570}
• gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
• gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
• gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570}
• gfs2: Don't call dlm after protocol is unmounted {CVE-2024-38570}
• gfs2: Don't skip dlm unlock if glock has an lvb {CVE-2024-38570}
• netfilter: nf_tables: release mutex after nft_gc_seq_end…

• dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956}
• userfaultfd: fix a race between writeprotect and exit_mmap() {CVE-2021-47461}
• netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
• x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
• bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
• selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161}
• pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
• pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940}
• net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
• wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
• ata: libata-core: Fix double free on error {CVE-2024-41087}
• drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
• drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
• net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
• drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
• net/sched: flower: Fix chain template offload {CVE-2024-26669}
• ipv6: Remove extra counter pull before gc {CVE-2023-52340}
• ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
• net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340}
• net: add a route cache full diagnostic message {CVE-2023-52340}
• Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
• tcp_metrics: validate source addr length {CVE-2024-42154}
• net: fix out-of-bounds access in ops_init {CVE-2024-36883}
• tap: add missing verification for short frame {CVE-2024-41090}
• tun: add missing verification for short frame {CVE-2024-41091}
• iommu: Fix potential use-after-free during probe {CVE-2022-48796}
• nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}
• nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789}
• nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788}
• ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
• ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
• ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
• hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698}
• ubi: Check for too small LEB size in VTBL code {CVE-2024-25739}
• scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811}
• arp: Prevent overflow in arp_req_get(). {CVE-2024-26733}
• SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623}
• ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622}
• pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619}
• wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
• drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486}
• net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743}
• tracing: Restructure trace_clock_global() to never block {CVE-2021-46939}
• tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614}
• drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
• gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
• gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
• gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570}
• gfs2: Remove ill-placed consistency check {CVE-2024-38570}
• gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
• gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
• gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570}
• netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925} -…

• tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284}
• dev/parport: fix the array out-of-bounds risk {CVE-2024-42301}
• RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285}
• scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673}
• ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987}
• block/ioctl: prefer different overflow check {CVE-2024-41000}
• ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." {CVE-2024-40984}
• net/sched: Fix UAF when resolving a clash {CVE-2024-41040}
• nvme: avoid double free special payload {CVE-2024-41073}
• x86/tdx: Allow 32-bit emulation by default {CVE-2024-25744}
• x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742}
• x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742}
• x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742}
• x86: Make IA32_EMULATION boot time configurable {CVE-2024-25744}
• x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() {CVE-2024-25744}
• x86/elf: Make loading of 32bit processes depend on ia32_enabled() {CVE-2024-25744}
• x86/entry: Compile entry_SYSCALL32_ignore() unconditionally {CVE-2024-25744}
• x86/entry: Rename ignore_sysret() {CVE-2024-25744}
• x86/cpu: Don't write CSTAR MSR on Intel CPUs {CVE-2024-25744}
• x86: Introduce ia32_enabled() {CVE-2024-25742}
• x86: Fix misspelled Kconfig symbols {CVE-2024-25744}
• x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
• objtool: Add entry UNRET validation {CVE-2024-25744}
• x86/cpu: Switch to arch_cpu_finalize_init() {CVE-2022-40982}
• init: Provide arch_cpu_finalize_init() {CVE-2022-40982}
• gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
• gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
• gfs2: Remove ill-placed consistency check {CVE-2024-38570}
• gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
• dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956}
• drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
• net/mlx5: Discard command completions in internal error {CVE-2024-38555}
• net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538}
• netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628}
• perf/core: Fix potential NULL deref {CVE-2023-5717}
• perf: Disallow mis-matched inherited group reads {CVE-2023-5717}

These are all security issues fixed in the ovmf-202405-1.1 package on the GA media of openSUSE Tumbleweed.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)

• CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743)

Bug Fix(es):

• ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:Rocky Linux-27009)

• mm/mglru: fix underprotected page cache (JIRA:Rocky Linux-29235)

• [EMR] [TBOOT OS] SUT could not go to S3 state with Rocky Linux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:Rocky Linux-29673)

• system hangs completely - NMI not possible (JIRA:Rocky Linux-30678)

• ice 0000:6f:00.0: PTP failed to get time (JIRA:Rocky Linux-30110)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

Root has patched CVE-2024-25742 in the linux package for Root:Debian:11. Multiple fixed versions available.

Root has patched CVE-2024-25742 in the linux package for Root:Debian:12. Multiple fixed versions available.

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
• CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
• CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
• CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
• CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
• CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
• CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
• CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
• CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
• CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
• CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
• CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
• CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
• CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
• CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
• CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
• CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
• CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
• CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
• CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
• CVE-2021-47102: Fixed incorrect structure access In line: upper = info->upper_dev in net/marvell/prestera (bsc#1221009).
• CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
• CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
• CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
• CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
• CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
• CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
• CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
• CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
• CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
• CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
• CVE-2023-52469: Fixed a use-after-free in kv_parse_power_table (bsc#1220411).
• CVE-2023-52470: Fixed null-ptr-deref in radeon_crtc_init() (bsc#1220413).
• CVE-2023-52474: Fixed a vulnerability with non-PAGE_SIZE-end multi-iovec user SDMA requests (bsc#1220445).
• CVE-2023-52477: Fixed USB Hub accesses to uninitialized BOS descriptors (bsc#1220790).
• CVE-2023-52492: Fixed a null-pointer-dereference in channel unregistration function __dma_async_device_channel_register() (bsc#1221276).
• CVE-2023-52497: Fixed data corruption in erofs (bsc#1220879).
• CVE-2023-52501: Fixed possible memory corruption in ring-buffer (bsc#1220885).
• CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
• CVE-2023-52504: Fixed possible out-of bounds in apply_alternatives() on a 5-level paging machine (bsc#1221553).
• CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci (bsc#1220833).
• CVE-2023-52508: Fixed null pointer dereference in nvme_fc_io_getuuid() (bsc#1221015).
• CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836).
• CVE-2023-52510: Fixed a potential UAF in ca8210_probe() (bsc#1220898). -…

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-25742: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
• CVE-2023-52519: Fixed possible overflow in HID/intel-ish-hid/ipc (bsc#1220920).
• CVE-2023-52529: Fixed a potential memory leak in sony_probe() (bsc#1220929).
• CVE-2023-52474: Fixed a vulnerability with non-PAGE_SIZE-end multi-iovec user SDMA requests (bsc#1220445).
• CVE-2023-52513: Fixed connection failure handling in RDMA/siw (bsc#1221022).
• CVE-2023-52515: Fixed possible use-after-free in RDMA/srp (bsc#1221048).
• CVE-2023-52564: Reverted invalid fix for UAF in gsm_cleanup_mux() (bsc#1220938).
• CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
• CVE-2023-52510: Fixed a potential UAF in ca8210_probe() (bsc#1220898).
• CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927).
• CVE-2023-52528: Fixed uninit-value access in __smsc75xx_read_reg() (bsc#1220843).
• CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci (bsc#1220833).
• CVE-2023-52566: Fixed potential use after free in nilfs_gccache_submit_read_data() (bsc#1220940).
• CVE-2023-52508: Fixed null pointer dereference in nvme_fc_io_getuuid() (bsc#1221015).
• CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988).
• CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989).
• CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987).
• CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
• CVE-2023-52520: Fixed reference leak in platform/x86/think-lmi (bsc#1220921).
• CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
• CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836).
• CVE-2023-52501: Fixed possible memory corruption in ring-buffer (bsc#1220885).
• CVE-2023-52567: Fixed possible Oops in serial/8250_port: when using IRQ polling (irq = 0) (bsc#1220839).
• CVE-2023-52517: Fixed race between DMA RX transfer completion and RX FIFO drain in spi/sun6i (bsc#1221055).
• CVE-2023-52511: Fixed possible memory corruption in spi/sun6i (bsc#1221012).
• CVE-2023-52525: Fixed out of bounds check mwifiex_process_rx_packet() (bsc#1220840).
• CVE-2023-52504: Fixed possible out-of bounds in apply_alternatives() on a 5-level paging machine (bsc#1221553).
• CVE-2023-52575: Fixed SBPB enablement for spec_rstack_overflow=off (bsc#1220871).
• CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
• CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
• CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
• CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
• CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
• CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
• CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
• CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
• CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
• CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
• CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
• CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
• CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
• CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
• CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
• CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
• CVE-2021-47102: Fixed…

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

NOTE: This update has been retracted due to a bug in the BHI CPU sidechannel mitigation, which led to incorrect selection of other CPU mitigations.

The following security bugs were fixed:

• CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
• CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
• CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
• CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
• CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
• CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
• CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
• CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
• CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
• CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
• CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
• CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
• CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
• CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
• CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
• CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
• CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
• CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
• CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
• CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
• CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
• CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
• CVE-2021-47102: Fixed incorrect structure access In line: upper = info->upper_dev in net/marvell/prestera (bsc#1221009).
• CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
• CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
• CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
• CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
• CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
• CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
• CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
• CVE-2022-48628: Fixed possible lock in ceph (bsc#1220848).
• CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
• CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
• CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
• CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
• CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
• CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
• CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
• CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
• CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
• CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
• CVE-2023-52462: Fixed check for attempt to corrupt spilled pointer…

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
• CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
• CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
• CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
• CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
• CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
• CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
• CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
• CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
• CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
• CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
• CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
• CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
• CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
• CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
• CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
• CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
• CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
• CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
• CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
• CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
• CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
• CVE-2021-47102: Fixed incorrect structure access In line: upper = info->upper_dev in net/marvell/prestera (bsc#1221009).
• CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
• CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
• CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
• CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
• CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
• CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
• CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
• CVE-2022-48628: Fixed possible lock in ceph (bsc#1220848).
• CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
• CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
• CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
• CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
• CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
• CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
• CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
• CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
• CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
• CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
• CVE-2023-52462: Fixed check for attempt to corrupt spilled pointer (bsc#1220325).
• CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
• CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register…

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
• CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
• CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
• CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
• CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
• CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
• CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
• CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
• CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
• CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
• CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
• CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
• CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
• CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
• CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
• CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
• CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
• CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
• CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
• CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
• CVE-2021-47102: Fixed incorrect structure access In line: upper = info->upper_dev in net/marvell/prestera (bsc#1221009).
• CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
• CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
• CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
• CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
• CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource() (bsc#1222660).
• CVE-2021-47182: Fixed buffer length handling in scsi_mode_sense() in scsi core (bsc#1222662).
• CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).
• CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
• CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706).
• CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
• CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
• CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
• CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
• CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
• CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
• CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
• CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
• CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
• CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
• CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
• CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length…

The SUSE Linux Enterprise 15 SP4 LTSS kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
• CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
• CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
• CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
• CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222726).
• CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
• CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
• CVE-2024-26727: Fixed assertion if a newly created btrfs subvolume already gets read (bsc#1222536).
• CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
• CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
• CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435).
• CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
• CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
• CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
• CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
• CVE-2024-25742: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
• CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).
• CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
• CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
• CVE-2024-0841: Fixed a null pointer dereference in the hugetlbfs_fill_super function in hugetlbfs (HugeTLB pages) functionality (bsc#1219264).
• CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c (bsc#1218479).
• CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
• CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
• CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222117).
• CVE-2023-52616: Fixed unexpected pointer access in crypto/lib/mpi in mpi_ec_init (bsc#1221612).
• CVE-2023-52607: Fixed NULL pointer dereference in pgtable_cache_add kasprintf() (bsc#1221061).
• CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
• CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088).
• CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883).
• CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703).
• CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
• CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
• CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223505).
• CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).
• CVE-2021-47202: Fixed NULL pointer dereferences in of_thermal_ functions (bsc#1222878)
• CVE-2021-47195: Fixed use-after-free inside SPI via add_lock mutex (bsc#1222832).
• CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706).
• CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
• CVE-2021-47183:…

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• DMA engine subsystem;
• HID subsystem;
• I2C subsystem;
• PHY drivers;
• TTY drivers;
• IPv4 networking; (CVE-2024-35990, CVE-2024-35997, CVE-2024-35992, CVE-2024-35984, CVE-2024-36008, CVE-2024-36016)

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• DMA engine subsystem;
• HID subsystem;
• I2C subsystem;
• PHY drivers;
• TTY drivers;
• IPv4 networking; (CVE-2024-35997, CVE-2024-36016, CVE-2024-35990, CVE-2024-35984, CVE-2024-35992, CVE-2024-36008)

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• TTY drivers;
• SMB network file system;
• Netfilter;
• Bluetooth subsystem; (CVE-2024-26886, CVE-2024-26952, CVE-2023-52752, CVE-2024-27017, CVE-2024-36016)

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• TTY drivers;
• SMB network file system;
• Netfilter;
• Bluetooth subsystem; (CVE-2024-26886, CVE-2023-52752, CVE-2024-36016, CVE-2024-26952, CVE-2024-27017)

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• RISC-V architecture;
• x86 architecture;
• Block layer subsystem;
• Accessibility subsystem;
• Android drivers;
• Bluetooth drivers;
• Clock framework and drivers;
• Data acquisition framework and drivers;
• Cryptographic API;
• DMA engine subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• IRQ chip drivers;
• Multiple devices driver;
• VMware VMCI Driver;
• MMC subsystem;
• Network drivers;
• Device tree and open firmware driver;
• PCI subsystem;
• S/390 drivers;
• SCSI drivers;
• Freescale SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB subsystem;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• File systems infrastructure;
• BTRFS file system;
• Ext4 file system;
• FAT file system;
• Network file system client;
• Network file system server daemon;
• NILFS2 file system;
• Pstore file system;
• SMB network file system;
• UBI file system;
• Netfilter;
• BPF subsystem;
• Core kernel;
• PCI iomap interfaces;
• Memory management;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Ethernet bridge;
• Networking core;
• Distributed Switch Architecture;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• IEEE 802.15.4 subsystem;
• NFC subsystem;
• Open vSwitch;
• RDS protocol;
• Network traffic control;
• SMC sockets;
• Unix domain sockets;
• eXpress Data Path;
• ALSA SH drivers;
• KVM core; (CVE-2024-35902, CVE-2024-35958, CVE-2024-35978, CVE-2024-35886, CVE-2024-35807, CVE-2024-26994, CVE-2024-36004, CVE-2024-35955, CVE-2024-26925, CVE-2024-27059, CVE-2024-35989, CVE-2024-35940, CVE-2024-26952, CVE-2024-35907, CVE-2024-35819, CVE-2024-35872, CVE-2024-36016, CVE-2023-52488, CVE-2024-35884, CVE-2024-26886, CVE-2024-27018, CVE-2024-35905, CVE-2024-35897, CVE-2024-26929, CVE-2024-36007, CVE-2024-35855, CVE-2024-35885, CVE-2024-26965, CVE-2024-35896, CVE-2024-36029, CVE-2024-35813, CVE-2024-26811, CVE-2024-26923,…

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• M68K architecture;
• OpenRISC architecture;
• PowerPC architecture;
• RISC-V architecture;
• x86 architecture;
• Block layer subsystem;
• Accessibility subsystem;
• Bluetooth drivers;
• Clock framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• DMA engine subsystem;
• DPLL subsystem;
• FireWire subsystem;
• EFI core;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I2C subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Macintosh device drivers;
• Multiple devices driver;
• Media drivers;
• EEPROM drivers;
• MMC subsystem;
• Network drivers;
• STMicroelectronics network drivers;
• Device tree and open firmware driver;
• HiSilicon SoC PMU drivers;
• PHY drivers;
• Pin controllers subsystem;
• Remote Processor subsystem;
• S/390 drivers;
• SCSI drivers;
• SPI subsystem;
• Media staging drivers;
• Thermal drivers;
• TTY drivers;
• Userspace I/O drivers;
• USB subsystem;
• DesignWare USB3 driver;
• ACRN Hypervisor Service Module driver;
• Virtio drivers;
• 9P distributed file system;
• BTRFS file system;
• eCrypt file system;
• EROFS file system;
• File systems infrastructure;
• GFS2 file system;
• JFFS2 file system;
• Network file systems library;
• Network file system client;
• Network file system server daemon;
• NILFS2 file system;
• Proc file system;
• SMB network file system;
• Tracing file system;
• Mellanox drivers;
• Memory management;
• Socket messages infrastructure;
• Slab allocator;
• Tracing infrastructure;
• User-space API (UAPI);
• Core kernel;
• BPF subsystem;
• DMA mapping infrastructure;
• RCU subsystem;
• Dynamic debug library;
• KUnit library;
• Maple Tree data structure library;
• Heterogeneous memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Ethernet bridge;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Multipath TCP;
• Netfilter;
• NET/ROM layer;
• NFC subsystem;
• NSH protocol;
• Open vSwitch;
• Phonet protocol;
• SMC sockets;
• TIPC protocol;
• Unix domain sockets;
• Wireless networking;
• Key management;
• ALSA framework;
• HD-audio driver;
• Kirkwood ASoC drivers;
• MediaTek ASoC drivers; (CVE-2024-38601, CVE-2024-36935, CVE-2024-35991, CVE-2024-36032, CVE-2024-35988, CVE-2024-36886, CVE-2024-36913, CVE-2024-36928, CVE-2024-38553, CVE-2024-36927, CVE-2024-38615, CVE-2024-36958, CVE-2024-36977, CVE-2024-36889, CVE-2024-38554, CVE-2024-38590, CVE-2024-42134, CVE-2024-35857, CVE-2024-35850, CVE-2024-35986, CVE-2024-36921, CVE-2024-38569, CVE-2024-36966, CVE-2024-38542, CVE-2024-38585, CVE-2024-36884, CVE-2024-36006, CVE-2024-38577, CVE-2024-36016, CVE-2024-38584, CVE-2024-36887, CVE-2024-38598, CVE-2024-35994, CVE-2024-38603, CVE-2024-35998, CVE-2024-27401, CVE-2024-35852, CVE-2024-36944, CVE-2024-38572, CVE-2024-36917, CVE-2024-36943, CVE-2024-36009, CVE-2024-38587, CVE-2024-35949, CVE-2024-36945, CVE-2024-36004, CVE-2024-36919, CVE-2024-27398, CVE-2024-38582, CVE-2024-35847, CVE-2024-38580, CVE-2024-38602, CVE-2024-36916, CVE-2024-36903, CVE-2024-38555, CVE-2024-36952, CVE-2024-38589, CVE-2024-27394, CVE-2024-36933,…

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• M68K architecture;
• OpenRISC architecture;
• PowerPC architecture;
• RISC-V architecture;
• x86 architecture;
• Block layer subsystem;
• Accessibility subsystem;
• Bluetooth drivers;
• Clock framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• DMA engine subsystem;
• DPLL subsystem;
• FireWire subsystem;
• EFI core;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I2C subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Macintosh device drivers;
• Multiple devices driver;
• Media drivers;
• EEPROM drivers;
• MMC subsystem;
• Network drivers;
• STMicroelectronics network drivers;
• Device tree and open firmware driver;
• HiSilicon SoC PMU drivers;
• PHY drivers;
• Pin controllers subsystem;
• Remote Processor subsystem;
• S/390 drivers;
• SCSI drivers;
• SPI subsystem;
• Media staging drivers;
• Thermal drivers;
• TTY drivers;
• Userspace I/O drivers;
• USB subsystem;
• DesignWare USB3 driver;
• ACRN Hypervisor Service Module driver;
• Virtio drivers;
• 9P distributed file system;
• BTRFS file system;
• eCrypt file system;
• EROFS file system;
• File systems infrastructure;
• GFS2 file system;
• JFFS2 file system;
• Network file systems library;
• Network file system client;
• Network file system server daemon;
• NILFS2 file system;
• Proc file system;
• SMB network file system;
• Tracing file system;
• Mellanox drivers;
• Memory management;
• Socket messages infrastructure;
• Slab allocator;
• Tracing infrastructure;
• User-space API (UAPI);
• Core kernel;
• BPF subsystem;
• DMA mapping infrastructure;
• RCU subsystem;
• Dynamic debug library;
• KUnit library;
• Maple Tree data structure library;
• Heterogeneous memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Ethernet bridge;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Multipath TCP;
• Netfilter;
• NET/ROM layer;
• NFC subsystem;
• NSH protocol;
• Open vSwitch;
• Phonet protocol;
• SMC sockets;
• TIPC protocol;
• Unix domain sockets;
• Wireless networking;
• Key management;
• ALSA framework;
• HD-audio driver;
• Kirkwood ASoC drivers;
• MediaTek ASoC drivers; (CVE-2024-38601, CVE-2024-36935, CVE-2024-35991, CVE-2024-36032, CVE-2024-35988, CVE-2024-36886, CVE-2024-36913, CVE-2024-36928, CVE-2024-38553, CVE-2024-36927, CVE-2024-38615, CVE-2024-36958, CVE-2024-36977, CVE-2024-36889, CVE-2024-38554, CVE-2024-38590, CVE-2024-42134, CVE-2024-35857, CVE-2024-35850, CVE-2024-35986, CVE-2024-36921, CVE-2024-38569, CVE-2024-36966, CVE-2024-38542, CVE-2024-38585, CVE-2024-36884, CVE-2024-36006, CVE-2024-38577, CVE-2024-36016, CVE-2024-38584, CVE-2024-36887, CVE-2024-38598, CVE-2024-35994, CVE-2024-38603, CVE-2024-35998, CVE-2024-27401, CVE-2024-35852, CVE-2024-36944, CVE-2024-38572, CVE-2024-36917, CVE-2024-36943, CVE-2024-36009, CVE-2024-38587, CVE-2024-35949, CVE-2024-36945, CVE-2024-36004, CVE-2024-36919, CVE-2024-27398, CVE-2024-38582, CVE-2024-35847, CVE-2024-38580, CVE-2024-38602, CVE-2024-36916, CVE-2024-36903, CVE-2024-38555, CVE-2024-36952, CVE-2024-38589, CVE-2024-27394, CVE-2024-36933,…

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• Block layer subsystem;
• Bluetooth drivers;
• Clock framework and drivers;
• FireWire subsystem;
• GPU drivers;
• InfiniBand drivers;
• Multiple devices driver;
• EEPROM drivers;
• Network drivers;
• Pin controllers subsystem;
• Remote Processor subsystem;
• S/390 drivers;
• SCSI drivers;
• TTY drivers;
• 9P distributed file system;
• Network file system client;
• SMB network file system;
• Socket messages infrastructure;
• Dynamic debug library;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Multipath TCP;
• Netfilter;
• NSH protocol;
• Phonet protocol;
• TIPC protocol;
• Wireless networking;
• Key management;
• ALSA framework;
• HD-audio driver; (CVE-2024-36933, CVE-2024-36960, CVE-2024-26936, CVE-2024-36975, CVE-2023-52882, CVE-2024-27401, CVE-2024-36929, CVE-2024-36939, CVE-2024-35947, CVE-2024-36883, CVE-2024-26886, CVE-2024-36952, CVE-2024-36950, CVE-2024-36940, CVE-2024-36897, CVE-2023-52585, CVE-2024-26900, CVE-2024-36959, CVE-2024-36928, CVE-2024-36938, CVE-2024-36016, CVE-2024-36965, CVE-2024-36967, CVE-2024-36889, CVE-2024-36905, CVE-2024-36969, CVE-2024-36916, CVE-2024-36954, CVE-2024-27017, CVE-2024-36941, CVE-2024-36957, CVE-2024-27399, CVE-2024-36937, CVE-2024-36955, CVE-2024-38600, CVE-2023-52752, CVE-2024-36953, CVE-2024-26980, CVE-2024-36902, CVE-2024-26952, CVE-2024-36904, CVE-2024-36964, CVE-2024-36946, CVE-2024-36880, CVE-2024-36906, CVE-2024-36947, CVE-2024-36886, CVE-2024-36934, CVE-2024-35848, CVE-2024-36919, CVE-2024-36017, CVE-2024-36944, CVE-2024-36931, CVE-2024-27398)

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• Block layer subsystem;
• Bluetooth drivers;
• Clock framework and drivers;
• FireWire subsystem;
• GPU drivers;
• InfiniBand drivers;
• Multiple devices driver;
• EEPROM drivers;
• Network drivers;
• Pin controllers subsystem;
• Remote Processor subsystem;
• S/390 drivers;
• SCSI drivers;
• TTY drivers;
• 9P distributed file system;
• Network file system client;
• SMB network file system;
• Socket messages infrastructure;
• Dynamic debug library;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Multipath TCP;
• Netfilter;
• NSH protocol;
• Phonet protocol;
• TIPC protocol;
• Wireless networking;
• Key management;
• ALSA framework;
• HD-audio driver; (CVE-2024-36947, CVE-2024-36919, CVE-2024-36929, CVE-2024-36955, CVE-2023-52585, CVE-2024-36931, CVE-2024-27399, CVE-2024-36957, CVE-2024-26980, CVE-2024-27398, CVE-2024-36902, CVE-2024-36928, CVE-2024-36960, CVE-2024-36904, CVE-2024-27017, CVE-2024-36959, CVE-2024-36880, CVE-2024-26936, CVE-2024-36975, CVE-2023-52882, CVE-2024-35848, CVE-2024-36886, CVE-2024-36889, CVE-2024-27401, CVE-2024-36906, CVE-2024-36937, CVE-2024-36016, CVE-2024-36964, CVE-2024-36933, CVE-2024-36031, CVE-2024-36969, CVE-2024-36954, CVE-2024-26900, CVE-2024-26952, CVE-2024-36017, CVE-2024-35947, CVE-2024-36965, CVE-2023-52752, CVE-2024-36905, CVE-2024-36938, CVE-2024-36952, CVE-2024-36940, CVE-2024-36916, CVE-2024-38600, CVE-2024-36946, CVE-2024-36953, CVE-2024-36967, CVE-2024-26886, CVE-2024-36934, CVE-2024-36950, CVE-2024-36941, CVE-2024-36883, CVE-2024-36944, CVE-2024-36939, CVE-2024-36897)

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-40902)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• M68K architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• Accessibility subsystem;
• ACPI drivers;
• Android drivers;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Bluetooth drivers;
• Character device driver;
• Clock framework and drivers;
• Data acquisition framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• Buffer Sharing and Synchronization framework;
• DMA engine subsystem;
• FireWire subsystem;
• FPGA Framework;
• GPIO subsystem;
• GPU drivers;
• Greybus drivers;
• HID subsystem;
• HW tracing;
• I2C subsystem;
• IIO subsystem;
• InfiniBand drivers;
• Input Device (Mouse) drivers;
• IRQ chip drivers;
• Macintosh device drivers;
• Multiple devices driver;
• Media drivers;
• EEPROM drivers;
• VMware VMCI Driver;
• MMC subsystem;
• Network drivers;
• Near Field Communication (NFC) drivers;
• NVME drivers;
• Device tree and open firmware driver;
• PCI subsystem;
• Pin controllers subsystem;
• PTP clock framework;
• Remote Processor subsystem;
• S/390 drivers;
• SCSI drivers;
• Freescale SoC…