File _patchinfo of Package patchinfo.41176

<patchinfo incident="41176">
  <issue id="1248673" tracker="bnc">VUL-0: CVE-2025-38499: kernel live patch: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns</issue>
  <issue id="1248749" tracker="bnc">VUL-0: CVE-2025-38644: kernel live patch: wifi: mac80211: reject TDLS operations when station is not associated</issue>
  <issue id="1249534" tracker="bnc">VUL-0: CVE-2025-38678: kernel live patch: netfilter: nf_tables: reject duplicate device on updates</issue>
  <issue id="2025-38499" tracker="cve" />
  <issue id="2025-38644" tracker="cve" />
  <issue id="2025-38678" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager>
  <description>This update for the Linux Kernel 5.14.21-150400_24_173 fixes several issues.

The following security issues were fixed:

- CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534).
- CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673).
- CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749).
</description>
<summary>Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP4)</summary>
</patchinfo>