Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.161 fixes various security issues
The following security issues were fixed:
- CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251983).
- CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778).
- CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882).
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.83 fixes various security issues
The following security issues were fixed:
- CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019).
- CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1249208).
- CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207).
- CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631).
The following non security issue was fixed:
- bsc#1249208: fix
Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_161 fixes several issues.
The following security issues were fixed:
- CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650).
- CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).
- CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744).
Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_161 fixes several issues.
The following security issues were fixed:
- CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).
- CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
- CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
- CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1245791).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).
Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_161 fixes one issue.
The following security issue was fixed:
- CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1243648).