gpp_maybe Security update for the linux kernel (live patch 28 for sle 15 sp4)

SUSE-SLE-Module-Live-Patching-15-SP4-2025-687

This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1228585). - CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1227371). - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).

• Release Date
  Feb 24 2025
• References
  Bugzilla: 1227371, 1228585, 1236783
  CVEs: CVE-2024-36974, CVE-2024-40956, CVE-2024-53104
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15.4 s390x

• Packages
  kernel-livepatch-5_14_21-150400_24_125-default
  Kernel live patch module

  7-150400.2.1 lock rpm

  kernel-livepatch-SLE15-SP4_Update_28
  Kernel live patch module

  7-150400.2.1 lock src

SUSE Linux Enterprise Live Patching 15.4 ppc64le

• Packages
  kernel-livepatch-5_14_21-150400_24_125-default
  Kernel live patch module

  7-150400.2.1 lock rpm

  kernel-livepatch-SLE15-SP4_Update_28
  Kernel live patch module

  7-150400.2.1 lock src

SUSE Linux Enterprise Live Patching 15.4 x86_64

• Packages
  kernel-livepatch-5_14_21-150400_24_125-default
  Kernel live patch module

  7-150400.2.1 lock rpm

  kernel-livepatch-SLE15-SP4_Update_28
  Kernel live patch module

  7-150400.2.1 lock src