SUSE-SU-2025:02124-1: kernel-livepatch-SLE15-SP3_Update_45&distro=SUSE Linux Enterprise Live Patching 15 SP3 SUSE Linux Enterprise

Published

Published 26-06-2025Last modified 23-03-2026

Vulnerability summary

SUSE-SU-2025:02124-1 is a vulnerability in kernel-livepatch-SLE15-SP3_Update_45&distro=SUSE Linux Enterprise Live Patching 15 SP3 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 8 · Downstream 0 · Related 8

CVE-2022-49545 CVE-2024-40937 CVE-2024-50125 CVE-2024-50127 CVE-2024-50279 CVE-2024-50301+2 more

Timeline

26-06-2025
PublishedVulnerability first disclosed.
23-03-2026
Last modifiedVulnerability information updated.

Description

Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3) This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232908). - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233708). - CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233680). - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062). - CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232929). - CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227903). - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238730).