p PatchFirst

PatchFirst · Latest vulnerabilities

kernel-livepatch-sle15-sp6_update_6 vulnerabilities

Vulnerabilities published for kernel-livepatch-sle15-sp6_update_6 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 14

  1. SUSE-SU-2026:0269-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.30 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2024-57849: s390/cpum_sf: handle CPU hotplug remove during sampling (bsc#1235815). - CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203). - CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400). - CVE-2025-38588: ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1249241). - CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_ms

    kernel-livepatch-sle15-sp6_update_6Operating systems
    • Update to 17-150600.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. SUSE-SU-2025:4261-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.30 fixes various security issues The following security issues were fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778). - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882). - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672). - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537).

    kernel-livepatch-sle15-sp6_update_6Operating systems
    • Update to 16-150600.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. SUSE-SU-2025:3935-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1249208). - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207). - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019).

    kernel-livepatch-sle15-sp6_update_6Operating systems
    • Update to 15-150600.4.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. SUSE-SU-2025:3748-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673). - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158). - CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376). - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794). - CVE-2025-38110: net/mdiobus: Fix potential out-of-bound

    kernel-livepatch-sle15-sp6_update_6Operating systems
    • Update to 14-150600.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. SUSE-SU-2025:03571-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744). - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509). - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048).

    kernel-livepatch-sle15-sp6_update_6Operating systems
    • Update to 13-150600.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. SUSE-SU-2025:03217-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235). - CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236207). - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775). - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with net

    kernel-livepatch-sle15-sp6_update_6Operating systems
    • Update to 11-150600.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. SUSE-SU-2025:02937-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247351). - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218). - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350).

    kernel-livepatch-sle15-sp6_update_6Operating systems
    • Update to 10-150600.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. SUSE-SU-2025:02433-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235005). - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234892). - CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235921). - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579). - CVE-2025-21772: partitions: mac: fix handling of bogus partitio

    kernel-livepatch-sle15-sp6_update_6Operating systems
    • Update to 8-150600.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. SUSE-SU-2025:02161-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235129). - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062).

    kernel-livepatch-sle15-sp6_update_6Operating systems
    • Update to 7-150600.2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. SUSE-SU-2025:01944-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236701). - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (bsc#1239096). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077).

    kernel-livepatch-sle15-sp6_update_6Operating systems
    • Update to 6-150600.2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. SUSE-SU-2025:0937-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes one issue. The following security issue was fixed: - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452).

    kernel-livepatch-sle15-sp6_update_6Operating systems
    • Update to 2-150600.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. SUSE-SU-2024:4318-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642). - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823). - CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562). - CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355). - CVE-2024-26741: dccp/tcp: Unhash sk from ehash

    kernel-livepatch-sle15-sp6_update_6Operating systems
    • Update to 1-150600.13.3.5
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →