gpp_maybe Security update for the linux kernel (live patch 1 for sle 15 sp6)

SUSE-SLE-Module-Live-Patching-15-SP6-2025-697

This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed: - CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1228585). - CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1227371). - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).

• Release Date
  Feb 24 2025
• References
  Bugzilla: 1227371, 1228585, 1236783
  CVEs: CVE-2024-36974, CVE-2024-40956, CVE-2024-53104
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15.6 ppc64le

• Packages
  kernel-livepatch-6_4_0-150600_23_7-default
  Kernel live patch module

  9-150600.2.1 lock rpm

  kernel-livepatch-SLE15-SP6_Update_1
  Kernel live patch module

  9-150600.2.1 lock src

SUSE Linux Enterprise Live Patching 15.6 s390x

• Packages
  kernel-livepatch-6_4_0-150600_23_7-default
  Kernel live patch module

  9-150600.2.1 lock rpm

  kernel-livepatch-SLE15-SP6_Update_1
  Kernel live patch module

  9-150600.2.1 lock src

SUSE Linux Enterprise Live Patching 15.6 x86_64

• Packages
  kernel-livepatch-6_4_0-150600_23_7-default
  Kernel live patch module

  9-150600.2.1 lock rpm

  kernel-livepatch-SLE15-SP6_Update_1
  Kernel live patch module

  9-150600.2.1 lock src