Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix numerous security issues identified by distinct CVEs, including CVE-2024-26730 and many others. The vulnerabilities affect various kernel subsystems such as hardware monitoring (hwmon), Bluetooth L2CAP, SCSI target and core, netfilter, USB serial drivers, tracing, and more. The fixes address problems like invalid pointer dereferences, memory leaks, race conditions, out-of-bounds memory accesses, and other kernel errors that could lead to system instability or security breaches. This update consolidates patches for a wide array of kernel security flaws.

The vulnerabilities fixed by this update could potentially allow attackers to cause system crashes, memory corruption, information leaks, or denial of service conditions. Specific impacts vary by vulnerability but include kernel crashes due to null pointer dereferences, memory leaks that degrade system stability, use-after-free conditions that could lead to arbitrary code execution, and other memory safety issues. The update reduces the risk of exploitation by correcting these kernel-level security defects.

A security update for the SUSE Linux Enterprise 15 SP7 RT kernel has been released that addresses these vulnerabilities. Applying this official update is the recommended mitigation. No additional vendor advisories indicate that further action is required beyond installing the update.