FlawAtlas
Search the atlas
SUSE-SU-2025:0603-1 Not scored

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35863: smb: client: fix potential UAF in is_valid_oplock_break() (bsc#1224763). - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025). - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217). - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230). - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430). - CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645). - CVE-2024-57850: jffs2: Prevent rtime decompress memory corruption (bsc#1235812). - CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).

Exploit probability Not scored
Published February 20, 2025
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-ec2
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-syms
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-trace
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-xen

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2025:0603-1

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35863: smb: client: fix potential UAF in is_valid_oplock_break() (bsc#1224763). - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025). - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217). - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230). - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430). - CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645). - CVE-2024-57850: jffs2: Prevent rtime decompress memory corruption (bsc#1235812). - CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).

View original source

05 / REFERENCES

Further evidence