{"schemaVersion":3,"id":"SUSE-SU-2025:02131-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for the Linux Kernel (Live Patch 58 for SLE 12 SP5)\n\nThis update for the Linux Kernel 4.12.14-122_222 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231).\n- CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233708).\n- CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233680).\n- CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062).\n- CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232929).\n- CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227903).\n- CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238730).\n- CVE-2022-49179: block, bfq: do not move oom_bfqq (bsc#1241331).","dates":{"published":"2025-06-26T11:03:53.000Z","modified":"2026-03-23T04:47:41.060Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"kgraft-patch-SLE12-SP5_Update_58&distro=SUSE Linux Enterprise Live Patching 12 SP5","name":"kgraft-patch-SLE12-SP5_Update_58","label":"kgraft-patch-SLE12-SP5_Update_58&distro=SUSE Linux Enterprise Live Patching 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_58&distro=SUSE Linux Enterprise Live Patching 12 SP5","purlType":"rpm","versions":[{"text":"< 13-2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13-2.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502131-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-202502131-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1227903","label":"bugzilla.suse.com/1227903","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1232929","label":"bugzilla.suse.com/1232929","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1233680","label":"bugzilla.suse.com/1233680","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1233708","label":"bugzilla.suse.com/1233708","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1235062","label":"bugzilla.suse.com/1235062","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1235231","label":"bugzilla.suse.com/1235231","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1238730","label":"bugzilla.suse.com/1238730","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1241331","label":"bugzilla.suse.com/1241331","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2022-49179","label":"www.suse.com/security/cve/CVE-2022-49179","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-49545","label":"www.suse.com/security/cve/CVE-2022-49545","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40937","label":"www.suse.com/security/cve/CVE-2024-40937","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50125","label":"www.suse.com/security/cve/CVE-2024-50125","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50279","label":"www.suse.com/security/cve/CVE-2024-50279","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50301","label":"www.suse.com/security/cve/CVE-2024-50301","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56601","label":"www.suse.com/security/cve/CVE-2024-56601","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56605","label":"www.suse.com/security/cve/CVE-2024-56605","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2022-49179","CVE-2022-49545","CVE-2024-40937","CVE-2024-50125","CVE-2024-50279","CVE-2024-50301","CVE-2024-56601","CVE-2024-56605"],"downstream":[],"duplicates":[],"related":["CVE-2022-49179","CVE-2022-49545","CVE-2024-40937","CVE-2024-50125","CVE-2024-50279","CVE-2024-50301","CVE-2024-56601","CVE-2024-56605"]},"timeline":[{"kind":"published","date":"2025-06-26T11:03:53.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-03-23T04:47:41.060Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T20:49:42.746Z","stale":false,"partial":false}}