Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

SUSE: 2025:0187-1 important: Linux Kernel live patch security update

suse
Calendar Grey January 20, 2025
Scroller Suse
Crucial security patch released for the Linux Kernel tackling various vulnerabilities. Find detailed installation guidelines enclosed.
* bsc#1225733 * bsc#1225739 * bsc#1225819 * bsc#1228786 * bsc#1229273

Summary

## This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed: * CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). * CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). * CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). * CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG (bsc#1231419). * CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).

Topics%20covered

Topics Covered

security advisory kernel update threat mitigation security issues SUSE Linux important update live patch

References

* bsc#1225733

* bsc#1225739

* bsc#1225819

* bsc#1228786

* bsc#1229273

* bsc#1229553

* bsc#1231419

* bsc#1233712

Cross-

* CVE-2023-52752

* CVE-2024-35949

* CVE-2024-36899

* CVE-2024-36904

* CVE-2024-40954

* CVE-2024-42133

* CVE-2024-43861

* CVE-2024-50264

CVSS scores:

* CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-35949 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-36899 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-36904 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:0187-1
Release Date: 2025-01-18T02:03:59Z
Rating: important

Topics%20covered

Topics Covered

security advisory kernel update threat mitigation security issues SUSE Linux important update live patch

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.