Security update for the Linux Kernel (Live Patch 64 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.244 fixes various security issues
The following security issues were fixed:
- CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314).
- CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205).
- CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).
The following non security issue was fixed:
- bsc#1250280: don't expose {file,inode}_operations with static lifetimes Fix issue with static lifetime empty_iops/no_open_fops by allocating them on the heap. Make sure previ
Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_244 fixes several issues.
The following security issues were fixed:
- CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650).
- CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).
- CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744).
Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_244 fixes several issues.
The following security issues were fixed:
- CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001).
- CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499).
Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_34 fixes several issues.
The following security issues were fixed:
- CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
- CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
- CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_244 fixes several issues.
The following security issues were fixed:
- CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238920).
- CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238912).
Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_244 fixes several issues.
The following security issues were fixed:
- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231).
- CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238730).
- CVE-2022-49179: block, bfq: do not move oom_bfqq (bsc#1241331).
Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_244 fixes one issue.
The following security issue was fixed:
- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431).
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-48742: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (bsc#1226694).
- CVE-2022-49033: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (bsc#1232045).
- CVE-2022-49035: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (bsc#1215304).
- CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
- CVE-2023-52922: can: bcm: Fix UAF in bcm_proc_show() (bsc#1233977).
- CVE-2024-26976: KVM: Always flush async #PF workqueue when vCPU is bein