p PatchFirst

PatchFirst · Latest vulnerabilities

kgraft-patch-sle12-sp5_update_23 vulnerabilities

Vulnerabilities published for kgraft-patch-sle12-sp5_update_23 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 17

  1. SUSE-SU-2022:3370-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_22 fixes several issues. The following security issues were fixed: - CVE-2022-29581: Fixed an improper Update of Reference Count vulnerability in net/sched that causes privilege escalation to root (bsc#1199695). - CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#1203116). - CVE-2022-1652: Fixed a use-after-free in bad_flp_intr (bsc#1200057).

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 17-2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. SUSE-SU-2022:3061-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_34 fixes several issues. The following security issues were fixed: - CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a victim's TCP session or terminate that session (bsc#1196867). - CVE-2022-36946: Fixed a remote denial of service attack inside nfqnl_mangle in net/netfilter/nfnetlink_queue.c, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative length (bsc#1201941).

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 16-2.3
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. SUSE-SU-2022:2780-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_88 fixes several issues. The following security issues were fixed: - CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel. (bnc#1198033) - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could crash the system or corrupt the system memory. (bsc#1196830) - CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742). - CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031). - CVE-2022-1679: Fixed a use-afte

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 15-2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. SUSE-SU-2022:2482-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_22 fixes several issues. The following security issues were fixed: - CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599). - CVE-2022-21499: Reinforced the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb (bsc#1199426). - CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 14-2.3
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. SUSE-SU-2022:2206-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_99 fixes one issue. The following security issue was fixed: - CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605)

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 13-2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. SUSE-SU-2022:1955-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_16 fixes several issues. The following security issues were fixed: - CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197597). - CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199602). - Add missing module_mutex lock to module notifier for previous live patches (bsc#1199834).

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 12-2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. SUSE-SU-2022:1783-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_40 fixes one issue. The following security issue was fixed: - CVE-2022-1280: Fixed a use-after-free vulnerability in drm_lease_held in drivers/gpu/drm/drm_lease.c. This flaw allowed a local user privilege attacker to cause a denial of service (DoS) or a kernel information leak (bsc#1198590).

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 11-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. SUSE-SU-2022:1589-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_99 fixes one issue. The following security issue was fixed: - CVE-2022-0330: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allowed a local user to crash the system or escalate their privileges on the system. (bsc#1195950)

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 10-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. SUSE-SU-2022:1322-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_88 fixes several issues. The following security issues were fixed: - CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197335) - CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bsc#1197344)

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 9-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. SUSE-SU-2022:1278-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_88 fixes several issues. The following security issues were fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197462) - CVE-2022-22942: Fixed stale file descriptors on failed usercopy. (bsc#1195065)

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 8-2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. SUSE-SU-2022:1012-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_150 fixes several issues. The following security issues were fixed: - CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516). - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 7-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. SUSE-SU-2022:0418-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_37 fixes several issues. The following security issues were fixed: - CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194533). - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195308). - CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1194460).

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 5-2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. SUSE-SU-2022:0246-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_89 fixes several issues. The following security issues were fixed: - CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure. (bsc#1191193) - CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 4-2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. SUSE-SU-2021:4038-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_75 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045). - CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 3-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. SUSE-SU-2021:3684-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_99 fixes several issues. The following security issues were fixed: - CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6_xmit of ip6_output.c (bsc#1192042). - CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module (bsc#1190432). - CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 2-2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. SUSE-SU-2021:3206-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-9517: Fixed possible memory corruption due to a use after free in pppol2tp_connect (bsc#1108488). - CVE-2019-3874: Fixed possible denial of service attack via SCTP socket buffer used by a userspace applications (bnc#1129898). - CVE-2019-3900: Fixed an infinite loop issue while handling incoming packets in handle_rx() (bnc#1133374). - CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172). - CVE-2021-3653: Missing validation of the `i

    kgraft-patch-sle12-sp5_update_23Operating systems
    • Update to 1-8.5.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →