Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_14 fixes several issues. The following security issues were fixed: - CVE-2024-49855: nbd: fix race between timeout and normal completion (bsc#1232900). - CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236701). - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (bsc#1239096). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for the Linux Kernel 6.4.0-150600_23_14 fixes several issues. The following security issues were fixed: - CVE-2024-49855: nbd: fix race between timeout and normal completion (bsc#1232900). - CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236701). - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (bsc#1239096). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1232900
- https://bugzilla.suse.com/1236701
- https://bugzilla.suse.com/1239077
- https://bugzilla.suse.com/1239096
- https://www.suse.com/security/cve/CVE-2024-49855
- https://www.suse.com/security/cve/CVE-2024-57996
- https://www.suse.com/security/cve/CVE-2024-58013
- https://www.suse.com/security/cve/CVE-2025-21680
- https://www.suse.com/support/update/announcement/2025/suse-su-202501932-1/