Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 528
Alerts This Week
Warning Icon 1 528

SUSE Linux 12 SP5: 2025:0091-1 important: kernel live patch fix

suse
Calendar Grey January 14, 2025
Scroller Suse
Crucial patch release for SUSE Linux Kernel addressing various vulnerabilities and strengthening overall system protection. Discover more information.
* bsc#1210619 * bsc#1220537 * bsc#1223363 * bsc#1223683 * bsc#1225011

Summary

## This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: * CVE-2022-48686: Fixed UAF when detecting digest errors (bsc#1226337). * CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). * CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1232637). * CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). * CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted()

Topics%20covered

Topics Covered

security advisory kernel patch important memory leak security issues SUSE Linux use-after-free

References

* bsc#1210619

* bsc#1220537

* bsc#1223363

* bsc#1223683

* bsc#1225011

* bsc#1225012

* bsc#1225013

* bsc#1225202

* bsc#1225211

* bsc#1225309

* bsc#1225310

* bsc#1225311

* bsc#1225819

* bsc#1226325

* bsc#1226337

* bsc#1228573

* bsc#1229273

* bsc#1229553

* bsc#1232637

* bsc#1233712

Cross-

* CVE-2021-46955

* CVE-2021-47378

* CVE-2021-47383

* CVE-2022-48686

* CVE-2022-48956

* CVE-2023-1829

* CVE-2023-52752

* CVE-2024-26828

* CVE-2024-26923

* CVE-2024-27398

* CVE-2024-35862

* CVE-2024-35863

* CVE-2024-35864

* CVE-2024-35867

* CVE-2024-35949

* CVE-2024-35950

* CVE-2024-36964

* CVE-2024-41059

* CVE-2024-43861

* CVE-2024-50264

CVSS scores:

* CVE-2021-46955 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2021-46955 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:0091-1
Release Date: 2025-01-14T07:33:42Z
Rating: important

Topics%20covered

Topics Covered

security advisory kernel patch important memory leak security issues SUSE Linux use-after-free

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.