p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости kgraft-patch-sle12-sp5_update_60

За последние 30 дней в kgraft-patch-sle12-sp5_update_60 опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 16

  1. SUSE-SU-2025:03652-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250302). - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673). - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794). - CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749).

    • Обновитесь до 18-2.1
    Опубликовано Обновлено
  2. SUSE-SU-2025:03482-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233072). - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744).

    • Обновитесь до 17-2.1
    Опубликовано Обновлено
  3. SUSE-SU-2025:03337-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862). - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001). - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499).

    • Обновитесь до 16-2.1
    Опубликовано Обновлено
  4. SUSE-SU-2025:03135-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930). - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775). - CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231676). - CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231943). - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

    • Обновитесь до 15-2.1
    Опубликовано Обновлено
  5. SUSE-SU-2025:02918-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_38 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247351). - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218). - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350).

    • Обновитесь до 14-2.1
    Опубликовано Обновлено
  6. SUSE-SU-2025:02618-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776). - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).

    • Обновитесь до 13-2.1
    Опубликовано Обновлено
  7. SUSE-SU-2025:02507-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238920). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235005). - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234892). - CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235921). - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#123891

    • Обновитесь до 12-2.1
  8. SUSE-SU-2025:02096-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233708). - CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233680). - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062). - CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232929). - CVE-2022-49545: ALSA: usb-audio: Cancel pending

    • Обновитесь до 11-2.1
  9. SUSE-SU-2025:01849-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077).

    • Обновитесь до 10-2.1
  10. SUSE-SU-2025:01593-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847). - CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1233019).

    • Обновитесь до 9-2.1
  11. SUSE-SU-2025:1402-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (bsc#1240840). - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431).

    • Обновитесь до 8-2.1
    Опубликовано Обновлено
  12. SUSE-SU-2025:1248-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_170 fixes several issues. The following security issues were fixed: - CVE-2022-49014: net: tun: Fix use-after-free in tun_detach() (bsc#1232818). - CVE-2022-49563: crypto: qat - add param check for RSA (bsc#1238788). - CVE-2022-49564: crypto: qat - add param check for DH (bsc#1238790). - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235218).

    • Обновитесь до 7-2.1
    Опубликовано Обновлено
  13. SUSE-SU-2025:1092-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes one issue. The following security issue was fixed: - CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002)

    • Обновитесь до 6-2.1
    Опубликовано Обновлено
  14. SUSE-SU-2025:0916-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_170 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679). - CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640).

    • Обновитесь до 5-2.1
    Опубликовано Обновлено
  15. SUSE-SU-2025:0177-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_39 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1232637).

    • Обновитесь до 2-8.6.1
    Опубликовано Обновлено
  16. SUSE-SU-2024:3251-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579). - CVE-2024-35933: Fixed build regression (bsc#1224640). - CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707). - CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). - CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156) - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500). - CVE-2024-43863: Fix a deadlock in dma buf fence polling (bsc#1229497) - CVE-2024-41

    • Обновитесь до 1-8.3.1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →