gpp_maybe Security update for the linux kernel (live patch 57 for sle 12 sp5)

SUSE-SLE-Live-Patching-12-SP5-2024-3822

This update for the Linux Kernel 4.12.14-122_219 fixes several issues. The following security issues were fixed: - CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). - CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). - CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). - CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). - CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).

• Release Date
  Oct 30 2024
• References
  Bugzilla: 1223683, 1225011, 1225012, 1225309, 1225310, 1225311, 1225819, 1226325, 1228573
  CVEs: CVE-2023-52752, CVE-2024-26923, CVE-2024-35862, CVE-2024-35863, CVE-2024-35864, CVE-2024-35867, CVE-2024-35950, CVE-2024-36964, CVE-2024-41059
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 12.5 ppc64le

• Packages
  kgraft-patch-4_12_14-122_219-default
  Kgraft patch module

  4-8.6.1

  lock rpm

  kgraft-patch-SLE12-SP5_Update_57
  Kgraft patch module

  4-8.6.1

  lock src

SUSE Linux Enterprise Live Patching 12.5 x86_64

• Packages
  kgraft-patch-4_12_14-122_219-default
  Kgraft patch module

  4-8.6.1

  lock rpm

  kgraft-patch-SLE12-SP5_Update_57
  Kgraft patch module

  4-8.6.1

  lock src

SUSE Linux Enterprise Live Patching 12.5 s390x

• Packages
  kgraft-patch-4_12_14-122_219-default
  Kgraft patch module

  4-8.6.1

  lock rpm

  kgraft-patch-SLE12-SP5_Update_57
  Kgraft patch module

  4-8.6.1

  lock src