p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости kernel-livepatch-sle15-sp4_update_27

За последние 30 дней в kernel-livepatch-sle15-sp4_update_27 опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 15

  1. SUSE-SU-2025:02455-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238920). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235005). - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234892). - CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235921). - CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (b

    • Обновитесь до 18-150400.2.1
  2. SUSE-SU-2025:02144-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232908). - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233708). - CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233680). - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062). - CVE-2024-50125: Bluetooth: SCO: Fix

    • Обновитесь до 17-150400.2.1
  3. SUSE-SU-2025:01935-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077).

    • Обновитесь до 16-150400.2.2
  4. SUSE-SU-2025:1454-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_73 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (bsc#1240840). - CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (bsc#1233294). - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431).

    • Обновитесь до 14-150400.2.1
  5. SUSE-SU-2025:1207-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235218). - CVE-2024-41090: tap: add missing verification for short frame (bsc#1228714).

    • Обновитесь до 13-150400.2.1
    Опубликовано Обновлено
  6. SUSE-SU-2025:0920-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets (bsc#1231196). - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). - CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679). - CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229640).

    • Обновитесь до 11-150400.2.1
    Опубликовано Обновлено
  7. SUSE-SU-2025:0462-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998). - CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641) - CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662) - CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231993).

    • Обновитесь до 9-150400.2.1
  8. SUSE-SU-2025:0249-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1232637). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client:

    • Обновитесь до 8-150400.9.6.1
    Опубликовано Обновлено
  9. SUSE-SU-2025:0110-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1232637). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).

    • Обновитесь до 7-150400.9.6.1
    Опубликовано Обновлено
  10. SUSE-SU-2024:4275-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). - CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). - CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). - Fixed intermit

    • Обновитесь до 6-150400.9.6.1
  11. SUSE-SU-2024:3780-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). - CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). - CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). - Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353) - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). -

    • Обновитесь до 5-150400.9.6.1
    Опубликовано Обновлено
  12. SUSE-SU-2024:3672-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). - CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). - CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#12250

    • Обновитесь до 4-150400.9.6.1
    Опубликовано Обновлено
  13. SUSE-SU-2024:3365-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-35950: Fully protect modes with dev->mode_config.mutex (bsc#1225310).

    • Обновитесь до 3-150400.9.6.2
    Опубликовано Обновлено
  14. SUSE-SU-2024:2823-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).

    • Обновитесь до 2-150400.9.6.1
  15. SUSE-SU-2024:2189-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488). - CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084). - CVE-2024-35863: Fix potential UAF in is_valid_oplock_break() (bsc#1224763). - CVE-2024-35867: Fix potential UAF in cifs_stats_proc_show() (bsc#1224664). - CVE-2024-35868: Fix potential UAF in cifs_stats_proc_write() (bsc#1224678). - CVE-2024-26928: Fix potential UAF in cifs_debug_files_proc_show() (bsc#1223532). - CVE-2024-36926: Fixed LPAR panics during boot up

    • Обновитесь до 1-150400.9.3.2

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →