Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

SUSE: 2024:4263-1 important: kernel update multiple fixes

suse
Calendar Grey December 9, 2024
Dist Suse Esm H88
Essential revisions for SUSE Linux kernel improve security and fix identified vulnerabilities. Apply suggested updates promptly.
* bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1223059 * bsc#1223363

Summary

## This update for the Linux Kernel 5.3.18-150200_24_188 fixes several issues. The following security issues were fixed: * CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). * CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). * CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1227472). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).

References

* bsc#1210619

* bsc#1220145

* bsc#1220537

* bsc#1223059

* bsc#1223363

* bsc#1223514

* bsc#1223683

* bsc#1225013

* bsc#1225202

* bsc#1225211

* bsc#1225302

* bsc#1225309

* bsc#1225310

* bsc#1225311

* bsc#1225312

* bsc#1225733

* bsc#1225819

* bsc#1226325

* bsc#1227471

* bsc#1227472

* bsc#1227651

* bsc#1228573

* bsc#1229553

Cross-

* CVE-2021-46955

* CVE-2021-47291

* CVE-2021-47378

* CVE-2021-47383

* CVE-2021-47402

* CVE-2021-47598

* CVE-2021-47600

* CVE-2022-48651

* CVE-2023-1829

* CVE-2023-52752

* CVE-2024-23307

* CVE-2024-26828

* CVE-2024-26852

* CVE-2024-26923

* CVE-2024-27398

* CVE-2024-35861

* CVE-2024-35862

* CVE-2024-35864

* CVE-2024-35950

* CVE-2024-36904

* CVE-2024-36964

* CVE-2024-41059

* CVE-2024-43861

CVSS scores:

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2024:4263-1
Release Date: 2024-12-09T10:04:08Z
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here