Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2021-47633: ath5k: fix OOB in ath5keepromreadpcalinfo5111 bsc1237768. CVE-2022-49080: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace bsc1238033...

hrtimers: Handle CPU state correctly on hotplug

...

cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU

...

PT-2025-20494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A long-standing race condition in the Linux kernel's PCI hotplug functionality can lead to a deadlock when hot-removing nested PCI hotplug ports. This issue occurs when a parent hotplug...

Linux Distros Unpatched Vulnerability : CVE-2024-53051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/hdcp: Add encoder check in intelhdcpgetcapability Sometimes during hotplug scenario or suspend/resume scenario encoder is not always initialized when...

Linux Distros Unpatched Vulnerability : CVE-2025-21693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the...

Linux Distros Unpatched Vulnerability : CVE-2024-57849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/cpumsf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHPAPPERFS390SFONLINE --...

Important: kernel

Issue Overview: Integer Overflow or Wraparound vulnerability in Linux kernel on x86 and ARM md, raid, raid5 modules allows Forced Integer Overflow. CVE-2024-23307 In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfochangednotify...

Linux Distros Unpatched Vulnerability : CVE-2024-57951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU transitions...

Linux Distros Unpatched Vulnerability : CVE-2022-49666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/memhotplug: Add addpages override for PPC With commit ffa0b64e3be5 powerpc: Fix virtaddrvalid for 64-bit Book3E & 32-bit the kernel now validate the add...

Linux Distros Unpatched Vulnerability : CVE-2023-52490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm: migrate: fix getting incorrect page mapping during page migration When running stress-ng...

Linux Distros Unpatched Vulnerability : CVE-2024-46761

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pci/hotplug/pnvphp: Fix hotplug driver crash on Powernv The hotplug driver for powerpc pci/hotplug/pnvphp.c causes a kernel crash when we try to...

Linux Distros Unpatched Vulnerability : CVE-2021-28972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In drivers/pci/hotplug/rpadlparsysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new...

Linux Distros Unpatched Vulnerability : CVE-2014-5388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one error in the pciread function in the ACPI PCI hotplug interface hw/acpi/pcihp.c in QEMU allows local guest users to obtain sensitive information and...

SUSE CVE-2025-21816

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Force migrate away hrtimers queued after CPUHPAPHRTIMERSDYING hrtimers are migrated away from the dying CPU to any online target at the CPUHPAPHRTIMERSDYING stage in order not to delay bandwidth timers handling tasks...

CVE-2022-49666

In the Linux kernel, the following vulnerability has been resolved: powerpc/memhotplug: Add addpages override for PPC With commit ffa0b64e3be5 "powerpc: Fix virtaddrvalid for 64-bit Book3E & 32-bit" the kernel now validate the addr against highmemory value. This results in the below BUGON with da...

DEBIAN-CVE-2025-21816

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Force migrate away hrtimers queued after CPUHPAPHRTIMERSDYING hrtimers are migrated away from the dying CPU to any online target at the CPUHPAPHRTIMERSDYING stage in order not to delay bandwidth timers handling tasks...

CVE-2025-21816

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Force migrate away hrtimers queued after CPUHPAPHRTIMERSDYING hrtimers are migrated away from the dying CPU to any online target at the CPUHPAPHRTIMERSDYING stage in order not to delay bandwidth timers handling tasks...

AZL-68823 CVE-2025-21816 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Force migrate away hrtimers queued after CPUHPAPHRTIMERSDYING hrtimers are migrated away from the dying CPU to any online target at the CPUHPAPHRTIMERSDYING stage in order not to delay bandwidth timers handling tasks...

UBUNTU-CVE-2025-21816

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Force migrate away hrtimers queued after CPUHPAPHRTIMERSDYING hrtimers are migrated away from the dying CPU to any online target at the CPUHPAPHRTIMERSDYING stage in order not to delay bandwidth timers handling tasks...