Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.
The following security issues were fixed:
- CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
- CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.
The following security issues were fixed:
- CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118).
- CVE-2022-48687: Fixed fix out-of-bounds read when setting HMAC data (bsc#1224043).
- CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.
The following security issues were fixed:
- CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644).
- CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
- CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
- CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
- CVE-2024-26585: Fixed race between tx work scheduling and socket close for tls (bsc#1220211).
- CVE-2023-6546: Fixed a race condition that could lead
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.
The following security issues were fixed:
- CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079).
- CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability perf component (bsc#1216644).
- CVE-2024-26622: Fixed a use-after-free bug in tomoyo_write_control() (bsc#1220828).
- CVE-2024-1086: Fixed a use-after-free vulnerability related to nft_verdict_init() (bsc#1219435).
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.
The following security issues were fixed:
- CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078).
- CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1218613).
- CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219432).
- CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the L
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.
The following security issues were fixed:
- CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487).
- CVE-2023-46813: Fixed a local privilege escalation with user-space programs that have access to MMIO regions (bsc#1216898).
- CVE-2023-39191: Fixed a lack of validation of dynamic pointers within user-supplied eBPF programs that may have allowed an attacker with CAP_BPF privileges to escalate privileges and execute arbitra
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.
The following security issues were fixed:
- CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).
- CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217522).
- CVE-2023-5178: Fixed a use-after-free vulnerability in queue intialization setup (bsc#1215768).
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.
The following security issues were fixed:
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584).
- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215097)
- CVE-2023-5345: Fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215971)
- CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain soc
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.
The following security issues were fixed:
- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1215118).
- CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440).
- CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1214812).
- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212934)
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.
The following security issues were fixed:
- CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214123).
- CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213587).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP devi
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.
The following security issues were fixed:
- CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187).
- CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395).
- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_ent
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.
The following security issues were fixed:
- - CVE-2023-33952: Fixed a vmwgfx Driver Double Free Local Privilege Escalation Vulnerability (bsc#1212348).
- CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212509).
- CVE-2023-2235: Fixed an use-after-free in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210987).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management co