Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

SUSE Linux Enterprise 15 SP5: 2024:4216-1 Important: Kernel Live Patch

suse
Calendar Grey December 5, 2024
Dist Suse Esm H88
A significant revision tackling various concerns in the Linux kernel for SUSE 15 SP5. Essential enhancements and resolutions are incorporated.
* bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521

Summary

## This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: * CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). * CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). * CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).

References

* bsc#1221302

* bsc#1223059

* bsc#1223363

* bsc#1223514

* bsc#1223521

* bsc#1223683

* bsc#1225011

* bsc#1225012

* bsc#1225013

* bsc#1225099

* bsc#1225309

* bsc#1225310

* bsc#1225311

* bsc#1225312

* bsc#1225429

* bsc#1225733

* bsc#1225739

* bsc#1225819

* bsc#1226325

* bsc#1226327

* bsc#1227471

* bsc#1228573

* bsc#1228786

* bsc#1229273

* bsc#1229553

Cross-

* CVE-2021-47517

* CVE-2021-47598

* CVE-2022-48651

* CVE-2022-48662

* CVE-2023-52752

* CVE-2023-52846

* CVE-2024-26610

* CVE-2024-26828

* CVE-2024-26852

* CVE-2024-26923

* CVE-2024-27398

* CVE-2024-35861

* CVE-2024-35862

* CVE-2024-35863

* CVE-2024-35864

* CVE-2024-35867

* CVE-2024-35905

* CVE-2024-35949

* CVE-2024-35950

* CVE-2024-36899

* CVE-2024-36904

* CVE-2024-36964

* CVE-2024-40954

* CVE-2024-41059

* CVE-2024-43861

CVSS scores:

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2024:4216-1
Release Date: 2024-12-05T17:33:37Z
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here