SUSE-SU-2025:02537-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47557: net/sched: schets: do not peek at classes beyond 'nbands' bsc1207361 bsc1225468. - CVE-2021-47595: net/sched: schets: do not remove idle classes from...

Linux Distros Unpatched Vulnerability : CVE-2024-57947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nfsetpipapo: fix initial map fill The initial buffer has to be inited to all-ones...

BELL-CVE-2024-57947

Bulletin has no description...

CVE-2024-57947

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfsetpipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the size of the first field, not the total field size. After each round in the map search step, the result a...

CVE-2024-57947

creationtimestamp| type| source ---|---|--- 2025-01-23 13:59:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113878026126540149 2025-01-23 14:02:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2732 2025-01-23 14:16:03+00:00| seen|...

CVE-2024-57947 netfilter: nf_set_pipapo: fix initial map fill

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfsetpipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the size of the first field, not the total field size. After each round in the map search step, the result a...

CVE-2024-57947

The CVE-2024-57947 issue affects the Linux kernel netfilter nf_set_pipapo logic used in NFT range matching. The bug arises from how the initial map is filled: the initial buffer was set to all-ones without constraining to the size of the first field, and after each map-search round, the swap betw...

CVE-2024-57947

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfsetpipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the size of the first field, not the total field size. After each round in the map search step, the result a...