SUSE-SU-2025:20213-1

Source
https://www.suse.com/support/update/announcement/2025/suse-su-202520213-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20213-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:20213-1
Upstream
CVE (4)
Related
Published
2025-04-29T11:20:13Z
Modified
2026-03-11T07:29:42Z
Summary
Security update for kernel-livepatch-MICRO-6-0_Update_2
Details

This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues:

  • CVE-2024-53237: Fixed bluetooth: fix use-after-free in device_for_each_child() (bsc#1235008)
  • CVE-2024-53082: Fixed virtio_net: Add hash_key_length check (bsc#1233677)
  • CVE-2024-8805: Fixed BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability (bsc#1240840)
  • CVE-2024-56650: Fixed netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431)
References

Affected packages

SUSE:Linux Micro 6.0 / kernel-livepatch-MICRO-6-0_Update_2

Package

Name
kernel-livepatch-MICRO-6-0_Update_2
Purl
pkg:rpm/suse/kernel-livepatch-MICRO-6-0_Update_2&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4-1.1

Ecosystem specific

{
    "binaries":  [
        {
            "kernel-livepatch-6_4_0-19-default":  "4-1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20213-1.json"