SUSE-SU-2025:0263-1
SUSE-SU-2025:0263-1 · Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781). - CVE-2024-36979: net: bridge: mst: fix vlan use-after-free (bsc#1227369). - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-27029: drm/amdgpu: fix mmhub client id out-of-bounds access Properly handle cid 0x140 (bsc#1226184). - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324).
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel-livepatch-sle15-sp6_update_0 SUSE:Linux Enterprise Live Patching 15 SP6
- Plages de versions concernées
- ECOSYSTEM: < 9-150600.4.19.1
Mettez à jour vers 9-150600.4.19.1
Sources originales
- https://www.suse.com/support/update/announcement/2025/suse-su-20250263-1/
- https://bugzilla.suse.com/1226184
- https://bugzilla.suse.com/1226324
- https://bugzilla.suse.com/1227369
- https://bugzilla.suse.com/1227781
- https://bugzilla.suse.com/1227784
- https://bugzilla.suse.com/1229275
- https://www.suse.com/security/cve/CVE-2024-27029
- https://www.suse.com/security/cve/CVE-2024-36971
- https://www.suse.com/security/cve/CVE-2024-36979
- https://www.suse.com/security/cve/CVE-2024-40920
- https://www.suse.com/security/cve/CVE-2024-40921
- https://www.suse.com/security/cve/CVE-2024-41057
- https://osv.dev/vulnerability/SUSE-SU-2025:0263-1