Security update for the Linux Kernel (Live Patch 53 for SLE 12 SP5) SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:0667-1 Final 1 1 2025-02-24T08:33:24Z current 2025-02-24T08:33:24Z 2025-02-24T08:33:24Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel (Live Patch 53 for SLE 12 SP5) This update for the Linux Kernel 4.12.14-122_194 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2021-47511: ALSA: pcm: oss: fix negative period/buffer sizes (bsc#1227700). - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2025-667,SUSE-SLE-Live-Patching-12-SP5-2025-667 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20250667-1/ Link for SUSE-SU-2025:0667-1 https://lists.suse.com/pipermail/sle-security-updates/2025-February/020417.html E-Mail link for SUSE-SU-2025:0667-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1227320 SUSE Bug 1227320 https://bugzilla.suse.com/1227700 SUSE Bug 1227700 https://bugzilla.suse.com/1236783 SUSE Bug 1236783 https://www.suse.com/security/cve/CVE-2021-47511/ SUSE CVE CVE-2021-47511 page https://www.suse.com/security/cve/CVE-2024-35789/ SUSE CVE CVE-2024-35789 page https://www.suse.com/security/cve/CVE-2024-53104/ SUSE CVE CVE-2024-53104 page SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_194-default-14-2.1 kgraft-patch-4_12_14-122_194-default-14-2.1 as a component of SUSE Linux Enterprise Live Patching 12 SP5 In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with size_t. Due to that, a too big value may be passed to the lower layers. This patch changes the code to handle with ssize_t and adds the proper error checks appropriately. CVE-2021-47511 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_194-default-14-2.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250667-1/ https://www.suse.com/security/cve/CVE-2021-47511.html CVE-2021-47511 https://bugzilla.suse.com/1225411 SUSE Bug 1225411 https://bugzilla.suse.com/1227700 SUSE Bug 1227700 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fast_rx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free bugs. Fix this by immediately calling ieee80211_check_fast_rx after the VLAN change. CVE-2024-35789 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_194-default-14-2.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250667-1/ https://www.suse.com/security/cve/CVE-2024-35789.html CVE-2024-35789 https://bugzilla.suse.com/1224749 SUSE Bug 1224749 https://bugzilla.suse.com/1227320 SUSE Bug 1227320 In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming. CVE-2024-53104 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_194-default-14-2.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250667-1/ https://www.suse.com/security/cve/CVE-2024-53104.html CVE-2024-53104 https://bugzilla.suse.com/1234025 SUSE Bug 1234025 https://bugzilla.suse.com/1236783 SUSE Bug 1236783