File _patchinfo of Package patchinfo.40937
<patchinfo incident="40937">
<issue id="1240744" tracker="bnc">VUL-0: CVE-2025-21791: kernel live patch: vrf: use RCU protection in l3mdev_l3_out()</issue>
<issue id="1243650" tracker="bnc">VUL-0: CVE-2024-53168: kernel live patch: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket</issue>
<issue id="1247315" tracker="bnc">VUL-0: CVE-2025-38477: kernel live patch: net/sched: sch_qfq: Fix race condition on qfq_aggregate</issue>
<issue id="2024-53168" tracker="cve" />
<issue id="2025-21791" tracker="cve" />
<issue id="2025-38477" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>nstange</packager>
<description>This update for the Linux Kernel 5.3.18-150300_59_201 fixes several issues.
The following security issues were fixed:
- CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650).
- CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).
- CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744).
</description>
<summary>Security update for the Linux Kernel (Live Patch 56 for SLE 15 SP3)</summary>
</patchinfo>