Unbreakable Enterprise kernel security update

5.15.0-8.91.4.1 - uek-rpm: Add opbmc to core rpm Somasundaram Krishnasamy Orabug: 35157130 5.15.0-8.91.4 - selftests/vm: remove ARRAYSIZE define from individual tests Shuah Khan Orabug: 35088471 - selftests: Provide local define of cpuidcount Reinette Chatre Orabug: 35088471 - tools: fix ARRAYSIZ...

In the Linux kernel before 5.16.3 drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in the error case whereas it is actually an error pointer).

...

GSD-2023-1002309 gpio: sim: fix a memory leak

gpio: sim: fix a memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.13 by commit 854e1ecff266033d3149666d3c5b8b0e174b4210, it was...

PT-2023-9771 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the Linux kernel's sim component, specifically in the gpio sim remove hogs function. This is due to an inverted logic bug that prevents GPIO ho...

SUSE CVE-2013-4540

Buffer overflow in scoopgpiohandlerupdate in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large 1 prevlevel, 2 gpiolevel, or 3 gpiodir value in a savevm image...

SUSE CVE-2014-9940

The regulatorenagpiofree function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of service use-after-free via a crafted application...

SUSE CVE-2019-19070

A memory leak in the spigpioprobe function in drivers/spi/spi-gpio.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering devmaddactionorreset failures, aka CID-d3b0ffa1d75d. NOTE: third parties dispute the relevance of this because the...

SUSE CVE-2021-26375

Insufficient General Purpose IO GPIO bounds check in System Management Unit SMU may result in access/updates from/to invalid address space that could result in denial of service...

PT-2025-53195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The GPIO controller component of the sc16is7xx driver is initialized prematurely, leading to a potential race condition. This occurs when another device attempts to utilize GPIO lines...

GSD-2023-1001469 Input: elants_i2c - properly handle the reset GPIO when power is off

Input: elantsi2c - properly handle the reset GPIO when power is off This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001245 gpio: sifive: Fix refcount leak in sifive_gpio_probe

gpio: sifive: Fix refcount leak in sifivegpioprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000877 gpio: sifive: Fix refcount leak in sifive_gpio_probe

gpio: sifive: Fix refcount leak in sifivegpioprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000768 Input: elants_i2c - properly handle the reset GPIO when power is off

Input: elantsi2c - properly handle the reset GPIO when power is off This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000323 gpio: amd8111: Fix PCI device reference count leak

gpio: amd8111: Fix PCI device reference count leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.269 by commit...

GSD-2023-1000216 gpio: amd8111: Fix PCI device reference count leak

gpio: amd8111: Fix PCI device reference count leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.159 by commit...

GSD-2023-1000200 pinctrl: meditatek: Startup with the IRQs disabled

pinctrl: meditatek: Startup with the IRQs disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.160 by commit...

GSD-2023-1000136 gpio: amd8111: Fix PCI device reference count leak

gpio: amd8111: Fix PCI device reference count leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit...

GSD-2023-1000129 gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()

gpio/rockchip: fix refcount leak in rockchipgpiolibregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit...

PT-2023-33484 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a refcount leak in the sifive gpio probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2023-33432 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.302 Description: The issue is related to a PCI device reference count leak in the amd8111 gpio driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...