gpp_maybe Security update for the linux kernel

SUSE-SLE-Module-Live-Patching-15-SP2-2024-3565

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633). - CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398). - CVE-2024-36971: net: fix __dst_negative_advice() race (bsc#1226145). - CVE-2024-41087: Fix double free on error (bsc#1228466). - CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015). - CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245). - CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434). - CVE-2024-46695: selinux,smack: do not bypass permissions check in inode_setsecctx hook (bsc#1230519). The following non-security bugs were fixed: - Revert "ext4: consolidate checks for resize of bigalloc into ext4_resize_begin" (bsc#1230326). - ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1230326). - ext4: add reserved GDT blocks check (bsc#1230326). - ext4: consolidate checks for resize of bigalloc into ext4_resize_begin (bsc#1230326). - ext4: fix bug_on ext4_mb_use_inode_pa (bsc#1230326). - kabi: add __nf_queue_get_refs() for kabi compliance.

• Release Date
  Oct 9 2024
• References
  Bugzilla: 1185988, 1220826, 1226145, 1227487, 1228466, 1229633, 1230015, 1230245, 1230326, 1230398, 1230434, 1230519, 1230767
  CVEs: CVE-2021-47069, CVE-2022-48911, CVE-2022-48945, CVE-2024-36971, CVE-2024-41087, CVE-2024-44946, CVE-2024-45003, CVE-2024-45021, CVE-2024-46695, CVE-2024-46774
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15.2 s390x

• Packages
  kernel-default
  The Standard Kernel

  5.3.18-150200.24.206.1 lock nosrc

  kernel-default-livepatch
  Metapackage to pull in matching kernel-livepatch package

  5.3.18-150200.24.206.1 lock rpm

  kernel-default-livepatch-devel
  Kernel symbols file used during kGraft patch development

  5.3.18-150200.24.206.1 lock rpm

  kernel-livepatch-5_3_18-150200_24_206-default
  Kernel live patch module

  1-150200.5.3.1 lock rpm

  kernel-livepatch-SLE15-SP2_Update_53
  Kernel live patch module

  1-150200.5.3.1 lock src

SUSE Linux Enterprise Live Patching 15.2 ppc64le

• Packages
  kernel-default
  The Standard Kernel

  5.3.18-150200.24.206.1 lock nosrc

  kernel-default-livepatch
  Metapackage to pull in matching kernel-livepatch package

  5.3.18-150200.24.206.1 lock rpm

  kernel-default-livepatch-devel
  Kernel symbols file used during kGraft patch development

  5.3.18-150200.24.206.1 lock rpm

  kernel-livepatch-5_3_18-150200_24_206-default
  Kernel live patch module

  1-150200.5.3.1 lock rpm

  kernel-livepatch-SLE15-SP2_Update_53
  Kernel live patch module

  1-150200.5.3.1 lock src

SUSE Linux Enterprise Live Patching 15.2 x86_64

• Packages
  kernel-default
  The Standard Kernel

  5.3.18-150200.24.206.1 lock nosrc

  kernel-default-livepatch
  Metapackage to pull in matching kernel-livepatch package

  5.3.18-150200.24.206.1 lock rpm

  kernel-default-livepatch-devel
  Kernel symbols file used during kGraft patch development

  5.3.18-150200.24.206.1 lock rpm

  kernel-livepatch-5_3_18-150200_24_206-default
  Kernel live patch module

  1-150200.5.3.1 lock rpm

  kernel-livepatch-SLE15-SP2_Update_53
  Kernel live patch module

  1-150200.5.3.1 lock src