SUSE-SU-2025:0263-1: kernel-livepatch-SLE15-SP6_Update_0&distro=SUSE Linux Enterprise Live Patching 15 SP6 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2025:0263-1 is a vulnerability in kernel-livepatch-SLE15-SP6_Update_0&distro=SUSE Linux Enterprise Live Patching 15 SP6 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 6 · Downstream 0 · Related 6Timeline
- 27-01-2025PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6) This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781). - CVE-2024-36979: net: bridge: mst: fix vlan use-after-free (bsc#1227369). - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-27029: drm/amdgpu: fix mmhub client id out-of-bounds access Properly handle cid 0x140 (bsc#1226184). - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- kernel-livepatch-SLE15-SP6_Update_0&distro=SUSE Linux Enterprise Live Patching 15 SP6< 9-150600.4.19.1
1 vendor · 1 product