p PatchFirst

PatchFirst · Latest vulnerabilities

kernel-livepatch-sle15-sp2_update_38 vulnerabilities

Vulnerabilities published for kernel-livepatch-sle15-sp2_update_38 in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 6

  1. SUSE-SU-2024:2109-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_157 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).

    • Update to 12-150200.2.2
    Published Updated
  2. SUSE-SU-2024:1729-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_157 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). - CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). - CVE-2024-26585: Fixed race between tx work scheduling and socket close for tls (bsc#1220211). - CVE-2023-6546: Fixed a race condition that could lead to a use-after-free in the GSM 0710 tty multiplexor (bsc#1222685).

    • Update to 11-150200.2.1
  3. SUSE-SU-2023:4802-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_157 fixes several issues. The following security issues were fixed: - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215442). - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215519)

    • Update to 5-150200.2.1
    Published Updated
  4. SUSE-SU-2023:4245-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_157 fixes several issues. The following security issues were fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212934).

    • Update to 4-150200.2.1
    Published Updated
  5. SUSE-SU-2023:3622-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_157 fixes several issues. The following security issues were fixed: - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).

    • Update to 2-150200.2.1
    Published Updated
  6. SUSE-SU-2023:2834-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513). - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-2002: Fixed a flaw that allowed an at

    • Update to 1-150200.5.3.1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →