Security update for the Linux Kernel

This security update for the SUSE Linux Enterprise 15 SP4 RT kernel addresses a range of security bugs including CVE-2024-50199 (skipping HugeTLB pages for unuse_vma), CVE-2024-53104 (uvcvideo frame parsing), multiple use-after-free vulnerabilities in block, smb, scsi, tipc, and bpf subsystems, dangling socket pointer issues in inet6, inet, and ieee802154, and other kernel component fixes. The update also resolves non-security bugs related to NFS readahead and readdir heuristics, tipc NULL dereference, and Xen PVH dom0 issues. These fixes improve kernel security and stability by preventing memory corruption and resource mismanagement.

The vulnerabilities fixed include use-after-free and dangling pointer bugs that could lead to kernel crashes or potentially allow escalation of privileges or denial of service. Parsing errors and reference counting issues could also cause instability or unexpected behavior in affected kernel modules. The update mitigates these risks by correcting the underlying code defects.

A security update for the SUSE Linux Enterprise 15 SP4 RT kernel has been released that addresses these vulnerabilities. Applying this official update is the recommended remediation. No additional vendor advisories indicate alternative mitigations or that no action is required.