Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024167 fixes one issue. The following security issue was fixed: CVE-2025-38477: net/sched: schqfq: Fix race condition on qfqaggregate bsc1247315. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

DEBIAN-CVE-2025-23282

NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...

CVE-2025-23282

The connected data confirms two concrete NVIDIA Linux driver CVEs associated with CVE-2025-23282 (race condition leading to privilege escalation) and CVE-2025-23280 (use-after-free vulnerability). Both affect NVIDIA Display Driver for Linux and are described as enabling code execution, privilege ...

CVE-2025-23280

CVE-2025-23280 is a use-after-free vulnerability in the NVIDIA Display Driver for Linux. The affected component is the NVIDIA display driver (Linux) and the described root cause is a use-after-free; exploitation is local (AV:L, AC:H, PR:L) with no user interaction. The impact is stated as potenti...

Linux Distros Unpatched Vulnerability : CVE-2025-61639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files...

Linux Distros Unpatched Vulnerability : CVE-2022-50449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: samsung: Fix memory leak in samsungclkregisterpll If clkregister fails, @pll-ratetable may have allocated memory by kmemdup, so it needs to be freed,...

Linux Distros Unpatched Vulnerability : CVE-2025-39949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qed: Don't collect too many protection override GRC elements In the protection override dump path, the firmware can return far too many GRC elements, resulting ...

Linux Distros Unpatched Vulnerability : CVE-2025-56588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution RCE vulnerability in the User module configuration via the computed field paramete...

Linux Distros Unpatched Vulnerability : CVE-2023-53542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy For some reason, the driver adding support for Exynos5420 MIPI phy back in 2016 wasn't used o...

Linux Distros Unpatched Vulnerability : CVE-2023-53539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Fix incomplete state save in rxerequester If a send packet is dropped by the IP layer in rxerequester the call to rxexmitpacket can fail with err ==...

Linux Distros Unpatched Vulnerability : CVE-2025-39936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Always pass in an error pointer to sevplatformshutdownlocked When 9770b428b1a2...

Linux Distros Unpatched Vulnerability : CVE-2022-50549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm thin: Fix ABBA deadlock between shrinkslab and dmpoolabortmetadata Following concurrent processes: P1drop cache P2kworker dropcachessysctlhandler dropslab...

Linux Distros Unpatched Vulnerability : CVE-2023-53584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ubifs: ubifsreleasepage: Remove ubifsassert0 to valid this process There are two states for ubifs writing pages: 1. Dirty, Private 2. Not Dirty, Not Private The...

Linux Distros Unpatched Vulnerability : CVE-2023-53547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Fix sdma v4 sw fini error Fix sdma v4 sw fini error for sdma 4.2.2 to solve the following general protection fault +0.108196 general protection faul...

Linux Distros Unpatched Vulnerability : CVE-2025-39899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/userfaultfd: fix kmaplocal LIFO ordering for CONFIGHIGHPTE With CONFIGHIGHPTE on 32-bit ARM, movepagespte maps PTE pages using kmaplocalpage, which requires...

Linux Distros Unpatched Vulnerability : CVE-2023-53464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Check that sock is valid before iscsisetparam The validity of sock should be...

Linux Distros Unpatched Vulnerability : CVE-2023-53458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cx23885: Fix a null-ptr-deref bug in bufferprepare and bufferfinish When the driver calls cx23885riscbuffer to prepare the buffer, the function call...

Linux Distros Unpatched Vulnerability : CVE-2023-53540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such...

Linux Distros Unpatched Vulnerability : CVE-2022-50500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netdevsim: fix memory leak in nsimdrvprobe when nsimdevresourcesregister failed If some items in nsimdevresourcesregister fail, memory leak will occur. The...

Linux Distros Unpatched Vulnerability : CVE-2023-53574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw88: delete timer and free skb queue when unloading Fix possible crash and memory leak on driver unload by deleting TX purge timer and freeing C2H queue...