Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_17 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets (bsc#1231196). - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). - CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679). - CVE-2024-42159: scsi: mpi3mr: fix sanitise num_phys (bsc#1228755).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for the Linux Kernel 6.4.0-150600_23_17 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets (bsc#1231196). - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). - CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679). - CVE-2024-42159: scsi: mpi3mr: fix sanitise num_phys (bsc#1228755).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1228755
- https://bugzilla.suse.com/1231196
- https://bugzilla.suse.com/1231204
- https://bugzilla.suse.com/1233679
- https://bugzilla.suse.com/1235452
- https://www.suse.com/security/cve/CVE-2024-42159
- https://www.suse.com/security/cve/CVE-2024-46815
- https://www.suse.com/security/cve/CVE-2024-46818
- https://www.suse.com/security/cve/CVE-2024-50302
- https://www.suse.com/security/cve/CVE-2024-56648
- https://www.suse.com/support/update/announcement/2025/suse-su-20250922-1/