Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

SUSE: 2024:4397-1 critical: Security Updates for Kernel Vulnerabilities

suse
Calendar Grey December 20, 2024
Dist Suse Esm H88
SUSE has released a critical kernel security patch addressing several vulnerabilities to improve overall system security and reliability.
* bsc#1232432 * bsc#1233479 * bsc#1233557 Cross-References:

Summary

## The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432). * CVE-2024-50290: media: cx24116: prevent overflows on SNR calculus (bsc#1233479). * CVE-2024-53063: media: dvbdev: prevent the risk of out of memory access (bsc#1233557).

Topics%20covered

Topics Covered

security advisory buffer overflow kernel update memory access SUSE CVE fixes media overflow

References

* bsc#1232432

* bsc#1233479

* bsc#1233557

Cross-

* CVE-2024-49995

* CVE-2024-50290

* CVE-2024-53063

CVSS scores:

* CVE-2024-49995 ( SUSE ): 0.0

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2024-49995 ( SUSE ): 0.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N

* CVE-2024-49995 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-50290 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

* CVE-2024-53063 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

* CVE-2024-53063 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* SUSE Linux Enterprise Server 11 SP4

* SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

An update that solves three vulnerabilities can now be installed.

##

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2024:4397-1
Release Date: 2024-12-20T12:45:49Z
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow kernel update memory access SUSE CVE fixes media overflow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here