File _patchinfo of Package patchinfo.39410

<patchinfo incident="39410">
  <issue id="1232908" tracker="bnc">VUL-0: CVE-2024-50127: kernel live patch: net: sched: fix use-after-free in taprio_change()</issue>
  <issue id="1232927" tracker="bnc">VUL-0: CVE-2024-50124: kernel live patch: Bluetooth: ISO: Fix UAF on iso_sock_timeout</issue>
  <issue id="1232929" tracker="bnc">VUL-0: CVE-2024-50125: kernel live patch: Bluetooth: SCO: Fix UAF on sco_sock_timeout</issue>
  <issue id="1233245" tracker="bnc">VUL-0: CVE-2024-50257: kernel live patch: netfilter: fix use-after-free in get_info()</issue>
  <issue id="1233680" tracker="bnc">VUL-0: CVE-2024-50301: kernel live patch: security/keys: fix slab-out-of-bounds in key_task_permission</issue>
  <issue id="1233708" tracker="bnc">VUL-0: CVE-2024-50279: kernel live patch: dm cache: fix out-of-bounds access to the dirty bitset when resizing</issue>
  <issue id="1235062" tracker="bnc">VUL-0: CVE-2024-56605: kernel live patch: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()</issue>
  <issue id="1235086" tracker="bnc">VUL-0: CVE-2024-53074: kernel live patch: wifi: iwlwifi: mvm: don't leak a link on AP removal</issue>
  <issue id="1235129" tracker="bnc">VUL-0: CVE-2024-56582: kernel live patch: btrfs: fix use-after-free in btrfs_encoded_read_endio()</issue>
  <issue id="1235231" tracker="bnc">VUL-0: CVE-2024-56601: kernel live patch: net: inet: do not leave a dangling sk pointer in inet_create()</issue>
  <issue id="1236244" tracker="bnc">VUL-0: CVE-2024-53208: kernel live patch: Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync</issue>
  <issue id="2024-50124" tracker="cve" />
  <issue id="2024-50125" tracker="cve" />
  <issue id="2024-50127" tracker="cve" />
  <issue id="2024-50257" tracker="cve" />
  <issue id="2024-50279" tracker="cve" />
  <issue id="2024-50301" tracker="cve" />
  <issue id="2024-53074" tracker="cve" />
  <issue id="2024-53208" tracker="cve" />
  <issue id="2024-56582" tracker="cve" />
  <issue id="2024-56601" tracker="cve" />
  <issue id="2024-56605" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager>
  <description>This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues.

The following security issues were fixed:

- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231).
- CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233708).
- CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233680).
- CVE-2024-53074: wifi: iwlwifi: mvm: do not leak a link on AP removal (bsc#1235086).
- CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235129).
- CVE-2024-53208: Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (bsc#1236244).
- CVE-2024-50257: netfilter: Fix use-after-free in get_info() (bsc#1233245).
- CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232908).
- CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062).
- CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232929).
- CVE-2024-50124: Bluetooth: ISO: Fix UAF on iso_sock_timeout (bsc#1232927).
</description>
<summary>Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)</summary>
</patchinfo>