gpp_maybe Security update for the linux kernel rt (live patch 5 for sle 15 sp5)

SUSE-SLE-Module-Live-Patching-15-SP5-2024-3824

This update for the Linux Kernel 5.14.21-150500_13_18 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). - CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). - CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). - CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).

• Release Date
  Oct 30 2024
• References
  Bugzilla: 1225011, 1225012, 1225309, 1225311, 1225819, 1226327, 1227471
  CVEs: CVE-2021-47598, CVE-2023-52752, CVE-2024-35862, CVE-2024-35863, CVE-2024-35864, CVE-2024-35867, CVE-2024-35905
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15.5 x86_64

• Packages
  kernel-livepatch-5_14_21-150500_13_18-rt
  Kernel live patch module

  15-150500.2.1 lock rpm

  kernel-livepatch-SLE15-SP5-RT_Update_5
  Kernel live patch module

  15-150500.2.1 lock src