SUSE-SU-2025:02449-1
SUSE-SU-2025:02449-1 · Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235005). - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234892). - CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235921). - CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233227). - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579). - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238912). - CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234885). - CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235769). - CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233118). - CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1243648).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp6_update_4 SUSE:Linux Enterprise Live Patching 15 SP6
- Affected ranges
- ECOSYSTEM: < 13-150600.2.1
Update to 13-150600.2.1
Original sources
- https://www.suse.com/support/update/announcement/2025/suse-su-202502449-1/
- https://bugzilla.suse.com/1233118
- https://bugzilla.suse.com/1233227
- https://bugzilla.suse.com/1234854
- https://bugzilla.suse.com/1234885
- https://bugzilla.suse.com/1234892
- https://bugzilla.suse.com/1235005
- https://bugzilla.suse.com/1235769
- https://bugzilla.suse.com/1235921
- https://bugzilla.suse.com/1238912
- https://bugzilla.suse.com/1241579
- https://bugzilla.suse.com/1243648
- https://bugzilla.suse.com/1244337
- https://www.suse.com/security/cve/CVE-2024-50208
- https://www.suse.com/security/cve/CVE-2024-50250
- https://www.suse.com/security/cve/CVE-2024-53146
- https://www.suse.com/security/cve/CVE-2024-53166
- https://www.suse.com/security/cve/CVE-2024-53173
- https://www.suse.com/security/cve/CVE-2024-53214
- https://www.suse.com/security/cve/CVE-2024-56558
- https://www.suse.com/security/cve/CVE-2024-57793
- https://www.suse.com/security/cve/CVE-2024-57893
- https://www.suse.com/security/cve/CVE-2025-21772
- https://osv.dev/vulnerability/SUSE-SU-2025:02449-1