Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 442
Alerts This Week
Warning Icon 1 442

SUSE 2024:3403-1 Critical: Kernel Update for Multiple Versions

suse
Calendar Grey September 23, 2024
Scroller Suse
Essential patch for the Linux Kernel confronting noted vulnerabilities with key security enhancements and restart guidelines.
* bsc#1230245 * bsc#1230413 Cross-References: * CVE-2024-45003

Summary

## The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2024-45003: Don't evict inode under the inode lru traversing context. (bsc#1230245) The following non-security bugs were fixed: * Revert "mm, kmsan: fix infinite recursion due to RCU critical section". (bsc#1230413) * Revert "mm/sparsemem: fix race in accessing memory_section->usage". (bsc#1230413) * Revert "mm: prevent derefencing NULL ptr in pfn_section_valid()". (bsc#1230413)

Topics%20covered

Topics Covered

security advisory kernel update critical security fix important system reboot SUSE Linux Micro

References

* bsc#1230245

* bsc#1230413

Cross-

* CVE-2024-45003

CVSS scores:

* CVE-2024-45003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* SUSE Linux Enterprise Micro 5.3

* SUSE Linux Enterprise Micro 5.4

* SUSE Linux Enterprise Micro for Rancher 5.3

* SUSE Linux Enterprise Micro for Rancher 5.4

An update that solves one vulnerability and has one security fix can now be

installed.

##

* https://www.suse.com/security/cve/CVE-2024-45003.html

* https://bugzilla.suse.com/show_bug.cgi?id=1230245

* https://bugzilla.suse.com/show_bug.cgi?id=1230413

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2024:3403-1
Rating: important

Topics%20covered

Topics Covered

security advisory kernel update critical security fix important system reboot SUSE Linux Micro

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.