SUSE-SU-2025:0263-1
SUSE-SU-2025:0263-1 · Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781). - CVE-2024-36979: net: bridge: mst: fix vlan use-after-free (bsc#1227369). - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-27029: drm/amdgpu: fix mmhub client id out-of-bounds access Properly handle cid 0x140 (bsc#1226184). - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp6_update_0 SUSE:Linux Enterprise Live Patching 15 SP6
- Affected ranges
- ECOSYSTEM: < 9-150600.4.19.1
Update to 9-150600.4.19.1
Original sources
- https://www.suse.com/support/update/announcement/2025/suse-su-20250263-1/
- https://bugzilla.suse.com/1226184
- https://bugzilla.suse.com/1226324
- https://bugzilla.suse.com/1227369
- https://bugzilla.suse.com/1227781
- https://bugzilla.suse.com/1227784
- https://bugzilla.suse.com/1229275
- https://www.suse.com/security/cve/CVE-2024-27029
- https://www.suse.com/security/cve/CVE-2024-36971
- https://www.suse.com/security/cve/CVE-2024-36979
- https://www.suse.com/security/cve/CVE-2024-40920
- https://www.suse.com/security/cve/CVE-2024-40921
- https://www.suse.com/security/cve/CVE-2024-41057
- https://osv.dev/vulnerability/SUSE-SU-2025:0263-1