Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-57882: Fixed mptcp: fix TCP options overflow. (bsc#1235916) - CVE-2024-46818: Fixed drm/amd/display: check gpio_id before used as array index (bsc#1231204) - CVE-2024-46815: Fixed drm/amd/display: check num_valid_sets before accessing reader_wm_sets[] (bsc#1231196) - CVE-2024-56648: Fixed net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452) - CVE-2024-50302: Fixed HID: core: zero-initialize the report buffer (bsc#1233679) - CVE-2024-53104: Fixed media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783) - CVE-2024-45016: Fixed netem: fix return value if duplicate enqueue fails (bsc#1230998) - CVE-2024-47684: Fixed tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231993)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-57882: Fixed mptcp: fix TCP options overflow. (bsc#1235916) - CVE-2024-46818: Fixed drm/amd/display: check gpio_id before used as array index (bsc#1231204) - CVE-2024-46815: Fixed drm/amd/display: check num_valid_sets before accessing reader_wm_sets[] (bsc#1231196) - CVE-2024-56648: Fixed net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452) - CVE-2024-50302: Fixed HID: core: zero-initialize the report buffer (bsc#1233679) - CVE-2024-53104: Fixed media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783) - CVE-2024-45016: Fixed netem: fix return value if duplicate enqueue fails (bsc#1230998) - CVE-2024-47684: Fixed tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231993)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1230998
- https://bugzilla.suse.com/1231196
- https://bugzilla.suse.com/1231204
- https://bugzilla.suse.com/1231993
- https://bugzilla.suse.com/1233679
- https://bugzilla.suse.com/1235452
- https://bugzilla.suse.com/1235916
- https://bugzilla.suse.com/1236783
- https://www.suse.com/security/cve/CVE-2024-45016
- https://www.suse.com/security/cve/CVE-2024-46815
- https://www.suse.com/security/cve/CVE-2024-46818
- https://www.suse.com/security/cve/CVE-2024-47684
- https://www.suse.com/security/cve/CVE-2024-50302
- https://www.suse.com/security/cve/CVE-2024-53104
- https://www.suse.com/security/cve/CVE-2024-56648
- https://www.suse.com/security/cve/CVE-2024-57882
- https://www.suse.com/support/update/announcement/2025/suse-su-202520188-1/