SUSE-SU-2025:20419-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL bsc1228557. - CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the schedsetaffinity function in the kernel module/sched/syscalls.c file of the Linux operating system is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel scheduling DoS

The vulnerability of the Linux operating system’s kernel scheduling component is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel scheduling DoS

The vulnerability of the Linux operating system’s kernel scheduling component is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

Linux kernel scheduling DoS

The vulnerability of the Linux operating system’s kernel scheduling component is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

Kernel: denial of service in atm_tc_enqueue in net/sched/sch_atm.c due to type confusion

A denial of service flaw was found in atmtcenqueue in net/sched/schatm.c in the Linux kernel. This issue may allow a local attacker to cause a denial of service due to type confusion. Non-negative numbers could indicate a TCACTSHOT condition rather than valid classification results...

kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route

This record is a duplicate of CVE-2023-4206, CVE-2023-4207, and CVE-2023-4208. Do not use this CVE record: CVE-2023-4128...

CVE-2023-23455

atmtcenqueue in net/sched/schatm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion non-negative numbers can sometimes indicate a TCACTSHOT condition rather than valid classification results...

kernel: scsi: qla2xxx: Fix scheduling while atomic

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix scheduling while atomic The driver makes a call into midlayer fcremoteportdelete which can put the thread to sleep. The thread that originates the call is in interrupt context. The combination of the two trigge...

Linux cpu.cfs_quota_us Heap Buffer Overflow DoS

The vulnerability of the cpu.cfsquotaus function located in kernel/sched/fair.c in the Linux operating system is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause service interruptions...