Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 555
Alerts This Week
Warning Icon 1 555

SUSE: Linux Kernel Important Integer Overflow Fix 2025:02403-1

suse
Calendar Grey July 21, 2025
Dist Suse Esm H88
A significant Linux Kernel update tackles various security flaws, including risks of integer overflow vulnerabilities.
* bsc#1229458 * bsc#1233118 * bsc#1234854 * bsc#1234885 * bsc#1234892

Summary

## This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: * CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). * CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235005). * CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234892). * CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235921). * CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959) * CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238912). * CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234885).

Topics%20covered

Topics Covered

security advisory security issue SuSE important integer overflow Linux kernel

References

* bsc#1229458

* bsc#1233118

* bsc#1234854

* bsc#1234885

* bsc#1234892

* bsc#1235005

* bsc#1235769

* bsc#1235921

* bsc#1238912

* bsc#1243648

Cross-

* CVE-2024-42232

* CVE-2024-50208

* CVE-2024-53146

* CVE-2024-53166

* CVE-2024-53173

* CVE-2024-53214

* CVE-2024-56558

* CVE-2024-57793

* CVE-2024-57893

* CVE-2025-21772

CVSS scores:

* CVE-2024-42232 ( SUSE ): 7.3

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2024-42232 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-42232 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2024-50208 ( SUSE ): 6.9

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2024-50208 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:02403-1
Release Date: 2025-07-21T07:07:03Z
Rating: important

Topics%20covered

Topics Covered

security advisory security issue SuSE important integer overflow Linux kernel

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.