File _patchinfo of Package patchinfo.42718

<patchinfo incident="42718">
  <issue tracker="bnc" id="1253439">VUL-0: CVE-2025-40186: kernel live patch: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().</issue>
  <issue tracker="bnc" id="1253473">VUL-0: CVE-2025-40129: kernel live patch: sunrpc: fix null pointer dereference on zero-length checksum</issue>
  <issue tracker="cve" id="2025-40129"/>
  <issue tracker="cve" id="2025-40186"/>
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager>
  <summary>Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)</summary>
  <description>
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.73 fixes various security issues

The following security issues were fixed:

- CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473).
- CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).
</description>
</patchinfo>
openSUSE Build Service is sponsored by