CVE-2024-57916

misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling

Resolve kernel panic caused by improper handling of IRQs while accessing GPIO values. This is done by replacing generic_handle_irq with handle_nested_irq.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.20%Up 0.2 points since Jan 20, 2025

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling

Resolve kernel panic caused by improper handling of IRQs while accessing GPIO values. This is done by replacing generic_handle_irq with handle_nested_irq.

Record: CVE-2024-57916
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

CVE List 5.5

misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling

In the Linux kernel, the following vulnerability has been resolved:

misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling

Resolve kernel panic caused by improper handling of IRQs while accessing GPIO values. This is done by replacing generic_handle_irq with handle_nested_irq.

Record: CVE-2024-57916
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

EUVDEUVD-2024-53819 5.5

In the Linux kernel, the following vulnerability has been resolved:

misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling

Resolve kernel panic caused by improper handling of IRQs while accessing GPIO values. This is done by replacing generic_handle_irq with handle_nested_irq.

Record: EUVD-2024-53819
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-hgm9-g82q-236j 5.5

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx:...

In the Linux kernel, the following vulnerability has been resolved:

misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling

Resolve kernel panic caused by improper handling of IRQs while accessing GPIO values. This is done by replacing generic_handle_irq with handle_nested_irq.

Record: GHSA-hgm9-g82q-236j
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVBELL-CVE-2024-57916 5.5

Record: BELL-CVE-2024-57916
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 5.5

misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling

In the Linux kernel, the following vulnerability has been resolved:

misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling

Resolve kernel panic caused by improper handling of IRQs while accessing GPIO values. This is done by replacing generic_handle_irq with handle_nested_irq.

Record: CVE-2024-57916
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 28 moreShow less

OSVDEBIAN-CVE-2024-57916 5.5

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling Resolve kernel panic caused by improper handling of IRQs while accessing GPIO values. This is done by replacing generic_handle_irq with handle_nested_irq.

Record: DEBIAN-CVE-2024-57916
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2025-1110 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock

A deadlock may happen since the i3c_master_register() acquires &i3cbus->lock twice. See the log below. Use i3cdev->desc->info instead of calling i3c_device_info() to avoid acquiring the lock twice.

v2:

Modified the title and commit message

============================================ WARNING: possible recursive locking detected 6.11.0-mainline

init/1 is trying to acquire lock: f1ffff80a6a40dc0 (&i3cbus->lock){++++}-{3:3}, at: i3c_bus_normaluse_lock

but task is already holding lock: f1ffff80a6a40dc0 (&i3cbus->lock){++++}-{3:3}, at: i3c_master_register

other info that might help us debug this: Possible unsafe locking scenario:

   CPU0
   ----

lock(&i3cbus->lock); lock(&i3cbus->lock);

*** DEADLOCK ***

May be due to missing lock nesting notation

2 locks held by init/1: #0: fcffff809b6798f8 (&dev->mutex){....}-{3:3}, at: __driver_attach #1: f1ffff80a6a40dc0 (&i3cbus->lock){++++}-{3:3}, at: i3c_master_register

stack backtrace: CPU: 6 UID: 0 PID: 1 Comm: init Call trace: dump_backtrace+0xfc/0x17c show_stack+0x18/0x28 dump_stack_lvl+0x40/0xc0 dump_stack+0x18/0x24 print_deadlock_bug+0x388/0x390 __lock_acquire+0x18bc/0x32ec lock_acquire+0x134/0x2b0 down_read+0x50/0x19c i3c_bus_normaluse_lock+0x14/0x24 i3c_device_get_info+0x24/0x58 i3c_device_uevent+0x34/0xa4 dev_uevent+0x310/0x384 kobject_uevent_env+0x244/0x414 kobject_uevent+0x14/0x20 device_add+0x278/0x460 device_register+0x20/0x34 i3c_master_register_new_i3c_devs+0x78/0x154 i3c_master_register+0x6a0/0x6d4 mtk_i3c_master_probe+0x3b8/0x4d8 platform_probe+0xa0/0xe0 really_probe+0x114/0x454 __driver_probe_device+0xa0/0x15c driver_probe_device+0x3c/0x1ac __driver_attach+0xc4/0x1f0 bus_for_each_dev+0x104/0x160 driver_attach+0x24/0x34 bus_add_driver+0x14c/0x294 driver_register+0x68/0x104 __platform_driver_register+0x20/0x30 init_module+0x20/0xfe4 do_one_initcall+0x184/0x464 do_init_module+0x58/0x1ec load_module+0xefc/0x10c8 __arm64_sys_finit_module+0x238/0x33c invoke_syscall+0x58/0x10c el0_svc_common+0xa8/0xdc do_el0_svc+0x1c/0x28 el0_svc+0x50/0xac el0t_64_sync_handler+0x70/0xbc el0t_64_sync+0x1a8/0x1ac(CVE-2024-43098)

In the Linux kernel, the following vulnerability has been resolved:

MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed

This avoids warning:

[ 0.118053] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:283

Caused by get_c0_compare_int on secondary CPU.

We also skipped saving IRQ number to struct clock_event_device *cd as it's never used by clockevent core, as per comments it's only meant for "non CPU local devices".(CVE-2024-46832)

In the Linux kernel, the following vulnerability has been resolved:

pinmux: Use sequential access to access desc->pinmux data

When two client of the same gpio call pinctrl_select_state() for the same functionality, we are seeing NULL pointer issue while accessing desc->mux_owner.

Let's say two processes A, B executing in pin_request() for the same pin and process A updates the desc->mux_usecount but not yet updated the desc->mux_owner while process B see the desc->mux_usecount which got updated by A path and further executes strcmp and while accessing desc->mux_owner it crashes with NULL pointer.

Serialize the access to mux related setting with a mutex lock.

cpu0 (process A)			cpu1(process B)

pinctrl_select_state() { pinctrl_select_state() { pin_request() { pin_request() { ... .... } else { desc->mux_usecount++; desc->mux_usecount && strcmp(desc->mux_owner, owner)) {

     if…

Record: OESA-2025-1110
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1111 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock

A deadlock may happen since the i3c_master_register() acquires &i3cbus->lock twice. See the log below. Use i3cdev->desc->info instead of calling i3c_device_info() to avoid acquiring the lock twice.

v2:

Modified the title and commit message

============================================ WARNING: possible recursive locking detected 6.11.0-mainline

init/1 is trying to acquire lock: f1ffff80a6a40dc0 (&i3cbus->lock){++++}-{3:3}, at: i3c_bus_normaluse_lock

but task is already holding lock: f1ffff80a6a40dc0 (&i3cbus->lock){++++}-{3:3}, at: i3c_master_register

other info that might help us debug this: Possible unsafe locking scenario:

   CPU0
   ----

lock(&i3cbus->lock); lock(&i3cbus->lock);

*** DEADLOCK ***

May be due to missing lock nesting notation

2 locks held by init/1: #0: fcffff809b6798f8 (&dev->mutex){....}-{3:3}, at: __driver_attach #1: f1ffff80a6a40dc0 (&i3cbus->lock){++++}-{3:3}, at: i3c_master_register

In the Linux kernel, the following vulnerability has been resolved:

pinmux: Use sequential access to access desc->pinmux data

When two client of the same gpio call pinctrl_select_state() for the same functionality, we are seeing NULL pointer issue while accessing desc->mux_owner.

Serialize the access to mux related setting with a mutex lock.

cpu0 (process A)			cpu1(process B)

pinctrl_select_state() { pinctrl_select_state() { pin_request() { pin_request() { ... .... } else { desc->mux_usecount++; desc->mux_usecount && strcmp(desc->mux_owner, owner)) {

     if (desc-&gt;mux_usecount &gt; 1)
           return 0;
     desc-&gt;mux_owner = owner;

} }(CVE-2024-47141)

In the Linux kernel, the following vulnerability has been resolved:

net/smc: check smcd_v2_ext_offset when receiving proposal msg

When receiving proposal msg in server, the field smcd_v2_ext_offset in proposal msg is from the remote client and can not be fully trusted. Once the value of smcd_v2_ext_offset exceed the max value, there has the chance to access wrong address, and crash may…

Record: OESA-2025-1111
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-57916 5.5

Record: UBUNTU-CVE-2024-57916
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVMGASA-2025-0030 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons & dwarves packages fix security vulnerabilities

Upstream kernel version 6.6.74 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record: MGASA-2025-0030
Updated: 2026-11-02

OSVMGASA-2025-0032 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.74 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2025-0032
Updated: 2026-11-02

OSVSUSE-SU-2025:0289-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag…

Record: SUSE-SU-2025:0289-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0428-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061).
CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'…

Record: SUSE-SU-2025:0428-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0499-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).
CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698).
CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).
CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
CVE-2024-56763: tracing: Prevent bad count for…

Record: SUSE-SU-2025:0499-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0557-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
CVE-2024-56610: kcsan: Turn…

Record: SUSE-SU-2025:0557-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20165-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20165-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20166-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20248-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20248-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20249-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20249-1
Updated: 2026-11-02

OSVUSN-7379-1 No score

linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities