Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059164 fixes several issues. The following security issues were fixed: CVE-2024-8805: Bluetooth: hcievent: Align BR/EDR JUSTWORKS paring with LE bsc1240840. CVE-2023-52885: SUNRPC: Fix UAF in svctcplistendataready bsc1227753. CVE-2024-50205: ALSA:...

CVE-2023-53118

creationtimestamp| type| source ---|---|--- 2025-05-04 08:17:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14733...

CVE-2025-47241

creationtimestamp| type| source ---|---|--- 2025-05-03 21:19:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14707 2025-05-03 21:34:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3locbxtg3ujs2 2025-05-03...

CVE-2025-4226

creationtimestamp| type| source ---|---|--- 2025-05-03 11:18:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14691 2025-05-03 12:58:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lobd4hyhsdq2 2025-05-03...

SUSE CVE-2023-53037

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer support is enabled and a device exposed to the OS by the driver fails INQUIRY commands, the driver frees up the memory allocated for an interna...

SUSE CVE-2023-53079

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix steering rules cleanup vport's mc, uc and multicast rules are not deleted in teardown path when EEH happens. Since the vport's promisc settingsuc, mc and all in firmware are reset after EEH, mlx5 driver will try to...

SUSE CVE-2023-53090

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters, but the event field of the waiter structure is not initialized; When copyfromuser fails in...

CVE-2024-26165

creationtimestamp| type| source ---|---|--- 2025-05-03 01:18:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14659...

CVE-2024-29057

creationtimestamp| type| source ---|---|--- 2025-05-03 01:18:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14657...

CVE-2024-38070

creationtimestamp| type| source ---|---|--- 2025-05-03 00:17:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14649...

CVE-2022-37906

creationtimestamp| type| source ---|---|--- 2025-05-02 19:16:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14575...

RHSA-2024:6890

creationtimestamp| type| source ---|---|--- 2025-05-02 17:16:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14524...

CVE-2023-53125

creationtimestamp| type| source ---|---|--- 2025-05-02 16:16:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14521 2025-05-02 20:08:32+00:00| seen| https://t.me/cvedetector/24368...

CVE-2023-53090

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters, but the event field of the waiter structure is not initialized; When copyfromuser fails in...

DEBIAN-CVE-2023-53090

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters, but the event field of the waiter structure is not initialized; When copyfromuser fails in...

DEBIAN-CVE-2023-53079

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix steering rules cleanup vport's mc, uc and multicast rules are not deleted in teardown path when EEH happens. Since the vport's promisc settingsuc, mc and all in firmware are reset after EEH, mlx5 driver will try to...

DEBIAN-CVE-2023-53067

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Only call gettimerirq once in constantclockeventinit Under CONFIGDEBUGATOMICSLEEP=y and CONFIGDEBUGPREEMPT=y, we can see the following messages on LoongArch, this is because using mightsleep in preemption disable...

AZL-70120 CVE-2023-53037 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer support is enabled and a device exposed to the OS by the driver fails INQUIRY commands, the driver frees up the memory allocated for an interna...

UBUNTU-CVE-2023-53090

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters, but the event field of the waiter structure is not initialized; When copyfromuser fails in...

UBUNTU-CVE-2023-53065

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix perfoutputbegin parameter is incorrectly invoked in perfeventbpfoutput syzkaller reportes a KASAN issue with stack-out-of-bounds. The call trace is as follows: dumpstack+0x9c/0xd3...