SUSE-SU-2024:3227-1
SUSE-SU-2024:3227-1 · Security update for the Linux Kernel
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41062: bluetooth/l2cap: sync sock recv cb and release (bsc#1228576). - CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454). - CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707). - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500). - CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326). - CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792). - CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466). - CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503) - CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619) - CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641) - CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400) - CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959) - CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832). - CVE-2024-41009: bpf: Fix overrunning reservations in ringbuf (bsc#1228020). The following non-security bugs were fixed: - Bluetooth: L2CAP: Fix deadlock (git-fixes). - mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes). - mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes). - nvme_core: scan namespaces asynchronously (bsc#1224105).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-rt SUSE:Linux Enterprise Micro 5.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.14.21-150400.15.91.3
Actualiza a 5.14.21-150400.15.91.3
kernel-source-rt SUSE:Linux Enterprise Micro 5.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.14.21-150400.15.91.3
Actualiza a 5.14.21-150400.15.91.3
kernel-rt SUSE:Linux Enterprise Micro 5.4
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.14.21-150400.15.91.3
Actualiza a 5.14.21-150400.15.91.3
kernel-source-rt SUSE:Linux Enterprise Micro 5.4
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.14.21-150400.15.91.3
Actualiza a 5.14.21-150400.15.91.3
Fuentes originales
- https://www.suse.com/support/update/announcement/2024/suse-su-20243227-1/
- https://bugzilla.suse.com/1193629
- https://bugzilla.suse.com/1194111
- https://bugzilla.suse.com/1194765
- https://bugzilla.suse.com/1196261
- https://bugzilla.suse.com/1196516
- https://bugzilla.suse.com/1196894
- https://bugzilla.suse.com/1198017
- https://bugzilla.suse.com/1203360
- https://bugzilla.suse.com/1206006
- https://bugzilla.suse.com/1206258
- https://bugzilla.suse.com/1207158
- https://bugzilla.suse.com/1216834
- https://bugzilla.suse.com/1221326
- https://bugzilla.suse.com/1221645
- https://bugzilla.suse.com/1223191
- https://bugzilla.suse.com/1224105
- https://bugzilla.suse.com/1227832
- https://bugzilla.suse.com/1228020
- https://bugzilla.suse.com/1228466
- https://bugzilla.suse.com/1228516
- https://bugzilla.suse.com/1228576
- https://bugzilla.suse.com/1228718
- https://osv.dev/vulnerability/SUSE-SU-2024:3227-1