SUSE-SU-2025:02436-1
SUSE-SU-2025:02436-1 · Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238920). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235005). - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234892). - CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235921). - CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959) - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238912). - CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234885). - CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233118). - CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1243648).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp4_update_28 SUSE:Linux Enterprise Live Patching 15 SP4
- Affected ranges
- ECOSYSTEM: < 15-150400.2.1
Update to 15-150400.2.1
Original sources
- https://www.suse.com/support/update/announcement/2025/suse-su-202502436-1/
- https://bugzilla.suse.com/1229458
- https://bugzilla.suse.com/1233118
- https://bugzilla.suse.com/1234854
- https://bugzilla.suse.com/1234885
- https://bugzilla.suse.com/1234892
- https://bugzilla.suse.com/1235005
- https://bugzilla.suse.com/1235921
- https://bugzilla.suse.com/1238912
- https://bugzilla.suse.com/1238920
- https://bugzilla.suse.com/1243648
- https://www.suse.com/security/cve/CVE-2022-49465
- https://www.suse.com/security/cve/CVE-2024-42232
- https://www.suse.com/security/cve/CVE-2024-50208
- https://www.suse.com/security/cve/CVE-2024-53146
- https://www.suse.com/security/cve/CVE-2024-53166
- https://www.suse.com/security/cve/CVE-2024-53173
- https://www.suse.com/security/cve/CVE-2024-53214
- https://www.suse.com/security/cve/CVE-2024-56558
- https://www.suse.com/security/cve/CVE-2024-57893
- https://www.suse.com/security/cve/CVE-2025-21772
- https://osv.dev/vulnerability/SUSE-SU-2025:02436-1