SUSE-SU-2025:02075-1

Advisory lineage Upstream: 7 Downstream: 0
Published: 24 Jun 2025, 09:03
Last modified:23 Mar 2026, 04:49

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 Jun 2025, 09:03
Published
Vulnerability first disclosed
23 Mar 2026, 04:49
Last Modified
Vulnerability information updated

Description

Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5) This update for the Linux Kernel 4.12.14-122_225 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233708). - CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233680). - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062). - CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232929). - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238730). - CVE-2022-49179: block, bfq: do not move oom_bfqq (bsc#1241331).

Affected Systems

  • suse•kgraft-patch-SLE12-SP5_Update_59&distro=SUSE Linux Enterprise Live Patching 12 SP5

    < 12-2.1

References (15)