gpp_maybe Security update for the linux kernel (live patch 14 for sle 15 sp5)

SUSE-SLE-Module-Live-Patching-15-SP5-2025-656

This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: - CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1228585). - CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1227371). - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).

• Release Date
  Feb 22 2025
• References
  Bugzilla: 1227371, 1228585, 1236783
  CVEs: CVE-2024-36974, CVE-2024-40956, CVE-2024-53104
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15.5 s390x

• Packages
  kernel-livepatch-5_14_21-150500_55_65-default
  Kernel live patch module

  11-150500.2.1 lock rpm

  kernel-livepatch-SLE15-SP5_Update_14
  Kernel live patch module

  11-150500.2.1 lock src

SUSE Linux Enterprise Live Patching 15.5 ppc64le

• Packages
  kernel-livepatch-5_14_21-150500_55_65-default
  Kernel live patch module

  11-150500.2.1 lock rpm

  kernel-livepatch-SLE15-SP5_Update_14
  Kernel live patch module

  11-150500.2.1 lock src

SUSE Linux Enterprise Live Patching 15.5 x86_64

• Packages
  kernel-livepatch-5_14_21-150500_55_65-default
  Kernel live patch module

  11-150500.2.1 lock rpm

  kernel-livepatch-SLE15-SP5_Update_14
  Kernel live patch module

  11-150500.2.1 lock src