Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-49855: nbd: fix race between timeout and normal completion (bsc#1232900). - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (bsc#1239096). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-49855: nbd: fix race between timeout and normal completion (bsc#1232900). - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (bsc#1239096). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1232900
- https://bugzilla.suse.com/1238324
- https://bugzilla.suse.com/1239077
- https://bugzilla.suse.com/1239096
- https://www.suse.com/security/cve/CVE-2022-49080
- https://www.suse.com/security/cve/CVE-2024-49855
- https://www.suse.com/security/cve/CVE-2024-57996
- https://www.suse.com/security/cve/CVE-2024-58013
- https://www.suse.com/support/update/announcement/2025/suse-su-202501873-1/