File _patchinfo of Package patchinfo.38500
<patchinfo incident="38500"> <issue id="1233294" tracker="bnc">VUL-0: CVE-2024-50205: kernel live patch: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()</issue> <issue id="1235431" tracker="bnc">VUL-0: CVE-2024-56650: kernel live patch: netfilter: x_tables: fix LED ID check in led_tg_check()</issue> <issue id="1240840" tracker="bnc">VUL-0: CVE-2024-8805: kernel live patch: BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability</issue> <issue id="2024-50205" tracker="cve" /> <issue id="2024-56650" tracker="cve" /> <issue id="2024-8805" tracker="cve" /> <category>security</category> <rating>important</rating> <packager>nstange</packager> <description>This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (bsc#1240840). - CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (bsc#1233294). - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431). </description> <summary>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)</summary> </patchinfo>