SUSE-SU-2025:02139-1
SUSE-SU-2025:02139-1 · Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232908). - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233708). - CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233680). - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062). - CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232929). - CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227903). - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238730).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-livepatch-sle15-sp3_update_44 SUSE:Linux Enterprise Live Patching 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 19-150300.2.2
Actualiza a 19-150300.2.2
Fuentes originales
- https://www.suse.com/support/update/announcement/2025/suse-su-202502139-1/
- https://bugzilla.suse.com/1227903
- https://bugzilla.suse.com/1232908
- https://bugzilla.suse.com/1232929
- https://bugzilla.suse.com/1233680
- https://bugzilla.suse.com/1233708
- https://bugzilla.suse.com/1235062
- https://bugzilla.suse.com/1235231
- https://bugzilla.suse.com/1238730
- https://www.suse.com/security/cve/CVE-2022-49545
- https://www.suse.com/security/cve/CVE-2024-40937
- https://www.suse.com/security/cve/CVE-2024-50125
- https://www.suse.com/security/cve/CVE-2024-50127
- https://www.suse.com/security/cve/CVE-2024-50279
- https://www.suse.com/security/cve/CVE-2024-50301
- https://www.suse.com/security/cve/CVE-2024-56601
- https://www.suse.com/security/cve/CVE-2024-56605
- https://osv.dev/vulnerability/SUSE-SU-2025:02139-1