gpp_maybe
Security update for the linux kernel (live patch 13 for sle 15 sp5)
SUSE-SLE-Module-Live-Patching-15-SP5-2024-4243
This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273). - CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). - CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). - CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). - CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353). - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). - CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). - CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
-
Release DateDec 6 2024
-
ReferencesBugzilla: 1223363, 1223683, 1225011, 1225012, 1225013, 1225099, 1225309, 1225311, 1225312, 1225429, 1225733, 1225739, 1225819, 1226325, 1226327, 1227471, 1228573, 1228786, 1229273, 1229553
CVEs: CVE-2021-47517, CVE-2021-47598, CVE-2023-52752, CVE-2023-52846, CVE-2024-26828, CVE-2024-26923, CVE-2024-27398, CVE-2024-35861, CVE-2024-35862, CVE-2024-35863, CVE-2024-35864, CVE-2024-35867, CVE-2024-35905, CVE-2024-35949, CVE-2024-36899, CVE-2024-36904, CVE-2024-36964, CVE-2024-40954, CVE-2024-41059, CVE-2024-43861 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Live Patching 15.5 ppc64le
-
Packageskernel-livepatch-5_14_21-150500_55_62-default
Kernel live patch modulekernel-livepatch-SLE15-SP5_Update_137-150500.11.6.1 lock rpm
Kernel live patch module7-150500.11.6.1 lock src
SUSE Linux Enterprise Live Patching 15.5 s390x
-
Packageskernel-livepatch-5_14_21-150500_55_62-default
Kernel live patch modulekernel-livepatch-SLE15-SP5_Update_137-150500.11.6.1 lock rpm
Kernel live patch module7-150500.11.6.1 lock src
SUSE Linux Enterprise Live Patching 15.5 x86_64
-
Packageskernel-livepatch-5_14_21-150500_55_62-default
Kernel live patch modulekernel-livepatch-SLE15-SP5_Update_137-150500.11.6.1 lock rpm
Kernel live patch module7-150500.11.6.1 lock src