Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_93 fixes several issues.
The following security issues were fixed:
- CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187).
- CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395).
- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_e
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_71 fixes several issues.
The following security issues were fixed:
- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204167).
- CVE-2022-2602: Fixed a local privilege escalation vulnerability involving Unix socket Garbage Collection and io_uring (bsc#1205186).
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_93 fixes several issues.
The following security issues were fixed:
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-4139: Fixed an issue with the i915 driver that allowed the GPU to access any physical memory (bsc#1205700).
- CVE-2022-3640: Fixed a use-after-free in l2cap_conn_del of the file net/bluetooth/l2cap_core.c (bsc#1204619).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#120
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_93 fixes one issue.
The following security issue was fixed:
- CVE-2022-42722: Fixed crash in beacon protection for P2P-device. (bsc#1204125)
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_93 fixes several issues.
The following security issues were fixed:
- CVE-2022-41674: Fixed buffer overflow that can be triggered by injected WLAN frames (bsc#1203994).
- CVE-2022-42719: Fixed use-after-free in the mac80211 stack when parsing a multi-BSSID element (bsc#1204292).
- CVE-2022-42720: Fixed refcounting bugs in the multi-BSS handling of the mac80211 stack (bsc#1204291).
- CVE-2022-42721: Fixed list management bug in BSS handling of the mac80211 stack (bsc#1204290).
- CVE-2022-41222: Fixed a use-after-free via a stale TLB (bsc#1203624).
- CVE-2022-39189: Fixed mishandled TLB flush o
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_21 fixes one issue.
The following security issue was fixed:
- CVE-2021-39698: Fixed a memory corruption due to a use after free that could lead to local escalation of privilege with no additional execution privileges needed (bsc#1196959).
The SUSE Linux Enterprise 15 SP3 kernel was updated receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nf_tables_api.c and could cause a denial of service upon binding to an already bound chain (bnc#1203117).
- CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).
- CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).
- CVE-2022-3028: Fixed race condition that