p PatchFirst

PatchFirst · Latest vulnerabilities

kernel-livepatch-sle15-sp4_update_28 vulnerabilities

Vulnerabilities published for kernel-livepatch-sle15-sp4_update_28 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 15

  1. SUSE-SU-2025:02909-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247351). - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218). - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350). - CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1244631).

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 17-150400.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. SUSE-SU-2025:02636-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776). - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1245804). - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797). - CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228645).

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 16-150400.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. SUSE-SU-2025:02436-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238920). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235005). - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234892). - CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235921). - CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (b

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 15-150400.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. SUSE-SU-2025:02125-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232908). - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233708). - CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233680). - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062). - CVE-2024-50125: Bluetooth: SCO: Fix

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 14-150400.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. SUSE-SU-2025:01906-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077).

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 13-150400.2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. SUSE-SU-2025:01668-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847). - CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage (bsc#1229504). - CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1233019).

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 12-150400.2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. SUSE-SU-2025:1232-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235218). - CVE-2024-41090: tap: add missing verification for short frame (bsc#1228714).

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 10-150400.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. SUSE-SU-2025:0917-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets (bsc#1231196). - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). - CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679). - CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640).

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 8-150400.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. SUSE-SU-2025:0687-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed: - CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1228585). - CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1227371). - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 7-150400.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. SUSE-SU-2025:0489-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998). - CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641) - CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662) - CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231993).

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 6-150400.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. SUSE-SU-2025:0111-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1232637). - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 5-150400.9.6.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. SUSE-SU-2024:4262-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). Non-security issues fixed: - Fixed intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353)

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 4-150400.9.6.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. SUSE-SU-2024:3836-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353) - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 3-150400.9.6.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. SUSE-SU-2024:3707-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 2-150400.9.6.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. SUSE-SU-2024:2495-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732). - CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611). - CVE-2024-35869: smb: client: guarantee refcounted children from parent session (bsc#1224679). - CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (bsc#1226789). - CVE-2024-38559: scsi: qedf: Ensure the copied buf is

    kernel-livepatch-sle15-sp4_update_28Operating systems
    • Update to 1-150400.9.3.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →