File _patchinfo of Package patchinfo.39357
<patchinfo incident="39357"> <issue id="1227903" tracker="bnc">VUL-0: CVE-2024-40937: kernel live patch: gve: clear napi->skb before dev_kfree_skb_any()</issue> <issue id="1232929" tracker="bnc">VUL-0: CVE-2024-50125: kernel live patch: Bluetooth: SCO: Fix UAF on sco_sock_timeout</issue> <issue id="1233680" tracker="bnc">VUL-0: CVE-2024-50301: kernel live patch: security/keys: fix slab-out-of-bounds in key_task_permission</issue> <issue id="1233708" tracker="bnc">VUL-0: CVE-2024-50279: kernel live patch: dm cache: fix out-of-bounds access to the dirty bitset when resizing</issue> <issue id="1235062" tracker="bnc">VUL-0: CVE-2024-56605: kernel live patch: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()</issue> <issue id="1235231" tracker="bnc">VUL-0: CVE-2024-56601: kernel live patch: net: inet: do not leave a dangling sk pointer in inet_create()</issue> <issue id="1238730" tracker="bnc">VUL-0: CVE-2022-49545: kernel live patch: ALSA: usb-audio: cancel pending work at closing a MIDI substream</issue> <issue id="1241331" tracker="bnc">VUL-0: CVE-2022-49179: kernel live patch: block, bfq: don't move oom_bfqq</issue> <issue id="2022-49179" tracker="cve" /> <issue id="2022-49545" tracker="cve" /> <issue id="2024-40937" tracker="cve" /> <issue id="2024-50125" tracker="cve" /> <issue id="2024-50279" tracker="cve" /> <issue id="2024-50301" tracker="cve" /> <issue id="2024-56601" tracker="cve" /> <issue id="2024-56605" tracker="cve" /> <category>security</category> <rating>important</rating> <packager>nstange</packager> <description>This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233708). - CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233680). - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062). - CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232929). - CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227903). - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238730). - CVE-2022-49179: block, bfq: do not move oom_bfqq (bsc#1241331). </description> <summary>Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)</summary> </patchinfo>
