SUSE-SU-2025:03223-1
SUSE-SU-2025:03223-1 · Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
This update for the Linux Kernel 6.4.0-150600_23_17 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235). - CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount (bsc#1232271). - CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236207). - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775). - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1245791). - CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231676). - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1245805). - CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231943). - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-livepatch-sle15-sp6_update_3 SUSE:Linux Enterprise Live Patching 15 SP6
- Intervalos de versiones afectados
- ECOSYSTEM: < 20-150600.2.1
Actualiza a 20-150600.2.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2025/suse-su-202503223-1/
- https://bugzilla.suse.com/1231676
- https://bugzilla.suse.com/1231943
- https://bugzilla.suse.com/1232271
- https://bugzilla.suse.com/1236207
- https://bugzilla.suse.com/1242579
- https://bugzilla.suse.com/1244235
- https://bugzilla.suse.com/1245505
- https://bugzilla.suse.com/1245775
- https://bugzilla.suse.com/1245791
- https://bugzilla.suse.com/1245805
- https://bugzilla.suse.com/1246030
- https://bugzilla.suse.com/1248108
- https://www.suse.com/security/cve/CVE-2024-47674
- https://www.suse.com/security/cve/CVE-2024-47706
- https://www.suse.com/security/cve/CVE-2024-49867
- https://www.suse.com/security/cve/CVE-2025-21659
- https://www.suse.com/security/cve/CVE-2025-21701
- https://www.suse.com/security/cve/CVE-2025-21999
- https://www.suse.com/security/cve/CVE-2025-37890
- https://www.suse.com/security/cve/CVE-2025-38000
- https://www.suse.com/security/cve/CVE-2025-38001
- https://www.suse.com/security/cve/CVE-2025-38087
- https://osv.dev/vulnerability/SUSE-SU-2025:03223-1