Описание
Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_182 fixes one issue.
The following security issue was fixed:
- CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).
Список пакетов
SUSE Linux Enterprise Live Patching 15 SP3
kernel-livepatch-5_3_18-150300_59_182-default-4-150300.2.1
Ссылки
- Link for SUSE-SU-2025:0907-1
- E-Mail link for SUSE-SU-2025:0907-1
- SUSE Security Ratings
- SUSE Bug 1233679
- SUSE CVE CVE-2024-50302 page
Описание
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
Затронутые продукты
SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_182-default-4-150300.2.1
Ссылки
- CVE-2024-50302
- SUSE Bug 1233491
- SUSE Bug 1233679