Linux · SUSE Linux Enterprise · Security advisory · February 17, 2025
SUSE-SU-2025:0564-1: Security update for 4 packages
SUSE-SU-2025:0564-1, released February 17, 2025, fixes 54 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
54
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0076
55th percentile
Priority of the 54 CVEs
Patch now 0
Urgent 0
High 13
Routine 41
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-coco | sles 15.6 | 6.4.0-15061.15.coco15sp6.1 |
| kernel-coco_debug | sles 15.6 | 6.4.0-15061.15.coco15sp6.1 |
| kernel-source-coco | sles 15.6 | 6.4.0-15061.15.coco15sp6.1 |
| kernel-syms-coco | sles 15.6 | 6.4.0-15061.15.coco15sp6.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2024-46858 | kernel-64kb: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088). | 7.0 | 0.0059 | None reported |
| High | CVE-2024-56633 | kernel-64kb: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485). | 7.8 | 0.0028 | None reported |
| High | CVE-2024-53203 | kernel-64kb: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001). | 7.8 | 0.0027 | None reported |
| High | CVE-2024-56650 | kernel-64kb: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430). | 7.1 | 0.0027 | None reported |
| High | CVE-2024-56608 | kernel-64kb: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487). | 7.8 | 0.0026 | None reported |
| High | CVE-2025-21655 | kernel-64kb: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163). | 7.8 | 0.0025 | None reported |
| High | CVE-2024-56600 | kernel-64kb: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217). | 7.8 | 0.0025 | None reported |
| High | CVE-2024-56601 | kernel-64kb: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230). | 7.8 | 0.0025 | None reported |
| High | CVE-2024-56693 | kernel-64kb: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418). | 7.8 | 0.0025 | None reported |
| High | CVE-2024-56658 | kernel-64kb: net: defer final 'struct net' free in netns dismantle (bsc#1235441). | 7.8 | 0.0024 | None reported |
| High | CVE-2025-21669 | kernel-64kb: vsock/virtio: discard packets if the transport changes (bsc#1236683). | 7.1 | 0.0023 | None reported |
| High | CVE-2024-57917 | kernel-64kb: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127). | 7.8 | 0.0022 | None reported |
| High | CVE-2025-21652 | kernel-64k: kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). | 7.8 | 0.0021 | None reported |
| Routine | CVE-2024-40980 | dtb-aarch64: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937). | 5.5 | 0.0076 | None reported |
| Routine | CVE-2024-49978 | gso: fix udp gso fraglist segmentation after pull from frag_list | 5.5 | 0.0066 | None reported |
| Routine | CVE-2024-57802 | kernel-64kb: netrom: check buffer length before accessing it (bsc#1235941). | 5.5 | 0.0061 | None reported |
| Routine | CVE-2024-50251 | kernel-64kb: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248). | 6.2 | 0.0053 | None reported |
| Routine | CVE-2024-57882 | kernel-64kb: mptcp: fix TCP options overflow | 5.5 | 0.0052 | None reported |
| Routine | CVE-2025-21676 | kernel-64kb: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696). | 5.5 | 0.0045 | None reported |
| Routine | CVE-2025-21673 | smb: client: fix double free of TCP_Server_Info::hostname | 5.5 | 0.0042 | None reported |
| Routine | CVE-2025-21663 | kernel-64kb: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260). | 5.5 | 0.0042 | None reported |
| Routine | CVE-2024-49948 | kernel-64kb: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161). | 5.5 | 0.0029 | None reported |
| Routine | CVE-2024-53187 | kernel-64kb: io_uring: check for overflows in io_pin_pages (bsc#1234947). | 5.5 | 0.0028 | None reported |
| Routine | CVE-2024-56715 | kernel-64kb: ionic: Fix netdev notifier unregister on failure (bsc#1235612). | 5.5 | 0.0026 | None reported |
| Routine | CVE-2024-50142 | kernel-64kb: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028). | 5.5 | 0.0026 | None reported |
Showing 1 to 25 of 54
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.