SUSE-SU-2025:0255-1
SUSE-SU-2025:0255-1 · Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6)
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781). - CVE-2024-36979: net: bridge: mst: fix vlan use-after-free (bsc#1227369). - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG (bsc#1231419). - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353). - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-livepatch-sle15-sp6_update_1 SUSE:Linux Enterprise Live Patching 15 SP6
- Intervalos de versiones afectados
- ECOSYSTEM: < 7-150600.13.6.1
Actualiza a 7-150600.13.6.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2025/suse-su-20250255-1/
- https://bugzilla.suse.com/1225733
- https://bugzilla.suse.com/1225739
- https://bugzilla.suse.com/1225819
- https://bugzilla.suse.com/1226324
- https://bugzilla.suse.com/1227369
- https://bugzilla.suse.com/1227781
- https://bugzilla.suse.com/1227784
- https://bugzilla.suse.com/1228786
- https://bugzilla.suse.com/1229273
- https://bugzilla.suse.com/1229275
- https://bugzilla.suse.com/1229553
- https://bugzilla.suse.com/1231419
- https://bugzilla.suse.com/1233712
- https://www.suse.com/security/cve/CVE-2023-52752
- https://www.suse.com/security/cve/CVE-2024-35949
- https://www.suse.com/security/cve/CVE-2024-36899
- https://www.suse.com/security/cve/CVE-2024-36904
- https://www.suse.com/security/cve/CVE-2024-36971
- https://www.suse.com/security/cve/CVE-2024-36979
- https://www.suse.com/security/cve/CVE-2024-40920
- https://www.suse.com/security/cve/CVE-2024-40921
- https://www.suse.com/security/cve/CVE-2024-40954
- https://osv.dev/vulnerability/SUSE-SU-2025:0255-1