ALT-PU-2023-8800

ALT-PU-2023-8563

ALT-PU-2023-8563: package `kernel-image-un-def` update to version 6.1.32-alt1

ALT-PU-2023-8873

ALT-PU-2023-8873: package `kernel-image-un-def` update to version 6.3.5-alt1

ALT-PU-2023-1994

ALT-PU-2023-1994: package `kernel-image-mp` update to version 6.3.8-alt1

ALT-PU-2023-8723

ALT-PU-2023-8723: package `kernel-image-rt` update to version 6.1.33-alt1.rt11

CVE-2023-53166

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix external_power_changed race bq25890_charger_external_power_changed() dereferences bq->charger, which gets sets in bq25890_power_supply_init() like this: bq->charger = devm_power_supply_register(bq->dev, &bq->desc, &psy_cfg); As soon as devm_power_supply_register() has called device_add() the external_power_changed callback can get called. So there is a window where bq25890_charger_external_power_changed() may get called while bq->charger has not been set yet leading to a NULL pointer dereference. This race hits during boot sometimes on a Lenovo Yoga Book 1 yb1-x90f when the cht_wcove_pwrsrc (extcon) power_supply is done with detecting the connected charger-type which happens to exactly hit the small window: BUG: kernel NULL pointer dereference, address: 0000000000000018 <snip> RIP: 0010:__power_supply_is_supplied_by+0xb/0xb0 <snip> Call Trace: <TASK> __power_supply_get_supplier_property+0...