Linux · openSUSE Leap · Security advisory · October 8, 2024

SUSE-SU-2024:3551-1: Security update for 3 packages

SUSE-SU-2024:3551-1, released October 8, 2024, fixes 161 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
161
None rated Critical
Exploited
0
None reported
Highest CVSS
8.0
Base score, 0 to 10
Highest EPSS
0.0089
59th percentile

Priority of the 161 CVEs

Patch now 0 Urgent 0 High 46 Routine 115

Fixed package versions

ProductReleaseFixed in
kernel-azureopensuse-leap 15.66.4.0-150600.8.14.1
kernel-azuresles 15.66.4.0-150600.8.14.1
kernel-source-azureopensuse-leap 15.66.4.0-150600.8.14.1
kernel-source-azuresles 15.66.4.0-150600.8.14.1
kernel-syms-azureopensuse-leap 15.66.4.0-150600.8.14.1
kernel-syms-azuresles 15.66.4.0-150600.8.14.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2024-44985 dtb-aarch64: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).7.8 0.0088 None reported
High CVE-2024-44998 dtb-aarch64: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).7.8 0.0079 None reported
High CVE-2024-44986 dtb-aarch64: Security update for the Linux Kernel7.8 0.0072 None reported
High CVE-2024-44970 net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink7.8 0.0057 None reported
High CVE-2024-44988 dtb-aarch64: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).7.1 0.0036 None reported
High CVE-2024-46744 dtb-aarch64: Security update for the Linux Kernel7.8 0.0030 None reported
High CVE-2024-46673 dtb-aarch64: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).7.8 0.0030 None reported
High CVE-2024-46743 dtb-aarch64: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756).7.1 0.0030 None reported
High CVE-2024-46759 dtb-aarch64: Security update for the Linux Kernel7.8 0.0028 None reported
High CVE-2024-38538 dtb-aarch64: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).7.1 0.0028 None reported
High CVE-2024-42265 dtb-aarch64: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).7.8 0.0028 None reported
High CVE-2024-46674 dtb-aarch64: Security update for the Linux Kernel7.8 0.0028 None reported
High CVE-2024-46747 dtb-aarch64: Security update for the Linux Kernel7.1 0.0028 None reported
High CVE-2024-46738 dtb-aarch64: Security update for the Linux Kernel7.8 0.0028 None reported
High CVE-2024-46774 dtb-aarch64: Security update for the Linux Kernel7.1 0.0027 None reported
High CVE-2024-26759 mm/swap: fix race when skipping swapcache7.0 0.0026 None reported
High CVE-2024-44999 dtb-aarch64: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).7.1 0.0026 None reported
High CVE-2024-42154 dtb-aarch64: tcp_metrics: validate source addr length (bsc#1228507).7.8 0.0026 None reported
High CVE-2024-44987 dtb-aarch64: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).7.8 0.0026 None reported
High CVE-2024-44977 dtb-aarch64: Security update for the Linux Kernel7.8 0.0025 None reported
High CVE-2024-46689 dtb-aarch64: Security update for the Linux Kernel7.8 0.0025 None reported
High CVE-2024-46722 dtb-aarch64: Security update for the Linux Kernel7.1 0.0025 None reported
High CVE-2024-46723 dtb-aarch64: Security update for the Linux Kernel7.1 0.0025 None reported
High CVE-2024-46746 dtb-aarch64: Security update for the Linux Kernel7.8 0.0025 None reported
High CVE-2024-26804 linux: In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growt...7.8 0.0025 None reported
Showing 1 to 25 of 161 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.