Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781). - CVE-2024-36979: net: bridge: mst: fix vlan use-after-free (bsc#1227369). - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781). - CVE-2024-36979: net: bridge: mst: fix vlan use-after-free (bsc#1227369). - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1226324
- https://bugzilla.suse.com/1227369
- https://bugzilla.suse.com/1227781
- https://bugzilla.suse.com/1227784
- https://bugzilla.suse.com/1229275
- https://www.suse.com/security/cve/CVE-2024-36971
- https://www.suse.com/security/cve/CVE-2024-36979
- https://www.suse.com/security/cve/CVE-2024-40920
- https://www.suse.com/security/cve/CVE-2024-40921
- https://www.suse.com/security/cve/CVE-2024-41057
- https://www.suse.com/support/update/announcement/2025/suse-su-20250268-1/