p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de kernel-livepatch-sle15-sp2_update_41

Vulnérabilité publiée pour kernel-livepatch-sle15-sp2_update_41 au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.

Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 10

  1. SUSE-SU-2024:3782-1

    Non évaluéeCorrectif disponible

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_166 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1227472). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). - CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). - CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).

    • Mettez à jour vers 15-150200.2.1
    Publication Mise à jour
  2. SUSE-SU-2024:3648-1

    Non évaluéeCorrectif disponible

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_150 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (bsc#1227651). - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). - CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).

    • Mettez à jour vers 14-150200.2.1
    Publication Mise à jour
  3. SUSE-SU-2024:3023-1

    Non évaluéeCorrectif disponible

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_166 fixes several issues. The following security issues were fixed: - CVE-2021-47402: Fixed use-after-free in fl_walk() (bsc#1225301) - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp (bsc#1225202).

    • Mettez à jour vers 13-150200.2.1
    Publication Mise à jour
  4. SUSE-SU-2024:2123-1

    Non évaluéeCorrectif disponible

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_166 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).

    • Mettez à jour vers 10-150200.2.2
    Publication Mise à jour
  5. SUSE-SU-2024:1742-1

    Non évaluéeCorrectif disponible

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_166 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). - CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). - CVE-2024-26585: Fixed race between tx work scheduling and socket close for tls (bsc#1220211). - CVE-2023-6546: Fixed a race condition that could lead to a use-after-free in the GSM 0710 tty multiplexor (bsc#1222685).

    • Mettez à jour vers 9-150200.2.1
    Publication Mise à jour
  6. SUSE-SU-2024:1537-1

    Non évaluéeCorrectif disponible

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_166 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability perf component (bsc#1216644). - CVE-2024-1086: Fixed a use-after-free vulnerability related to nft_verdict_init() (bsc#1219435).

    • Mettez à jour vers 8-150200.2.1
    Publication Mise à jour
  7. SUSE-SU-2024:0662-1

    Non évaluéeCorrectif disponible

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_166 fixes several issues. The following security issues were fixed: - CVE-2023-39198: Fixed a race condition leading to a use-after-free in qxl_mode_dumb_create() (bsc#1217116). - CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race condition (bsc#1218733).

    • Mettez à jour vers 5-150200.2.1
    Publication Mise à jour
  8. SUSE-SU-2023:4835-1

    Non évaluéeCorrectif disponible

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_166 fixes one issue. The following security issue was fixed: - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215519)

    • Mettez à jour vers 3-150200.2.1
    Publication Mise à jour
  9. SUSE-SU-2023:4264-1

    Non évaluéeCorrectif disponible

    Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_138 fixes one issue. The following security issue was fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).

    • Mettez à jour vers 2-150200.2.1
    Publication Mise à jour
  10. SUSE-SU-2023:4030-1

    Non évaluéeCorrectif disponible

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150). - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table which could be exploited by network adjacent attackers, i

    • Mettez à jour vers 1-150200.5.3.1
    Publication Mise à jour

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →