SUSE: 2024:3565-1 important: Linux Kernel Security Updates and Fixes
suse
October 9, 2024
* bsc#1185988 * bsc#1220826 * bsc#1226145 * bsc#1227487 * bsc#1228466
Summary
## The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633). * CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398). * CVE-2024-36971: net: fix __dst_negative_advice() race (bsc#1226145). * CVE-2024-41087: Fix double free on error (bsc#1228466). * CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015). * CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245). * CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434). * CVE-2024-46695: selinux,smack: do not bypass permissions check in inode_setsecctx hook (bsc#1230519).
Topics Covered
References
* bsc#1185988
* bsc#1220826
* bsc#1226145
* bsc#1227487
* bsc#1228466
* bsc#1229633
* bsc#1230015
* bsc#1230245
* bsc#1230326
* bsc#1230398
* bsc#1230434
* bsc#1230519
* bsc#1230767
Cross-
* CVE-2021-47069
* CVE-2022-48911
* CVE-2022-48945
* CVE-2024-36971
* CVE-2024-41087
* CVE-2024-44946
* CVE-2024-45003
* CVE-2024-45021
* CVE-2024-46695
* CVE-2024-46774
CVSS scores:
* CVE-2021-47069 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2022-48911 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2022-48911 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2024-36971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2024-36971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2024:3565-1
Release Date: 2024-10-09T09:40:49Z
Rating: important
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!