p PatchFirst

PatchFirst · Latest vulnerabilities

kernel-livepatch-sle15-sp4-rt_update_1 vulnerabilities

Vulnerabilities published for kernel-livepatch-sle15-sp4-rt_update_1 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 10

  1. SUSE-SU-2023:4848-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_19 fixes several issues. The following security issues were fixed: - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584). - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215097) - CVE-2023-5345: Fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215971) - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain

    kernel-livepatch-sle15-sp4-rt_update_1Operating systems
    • Update to 12-150400.2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. SUSE-SU-2023:4201-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_5 fixes several issues. The following security issues were fixed: - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1215118). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440). - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1214812). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#121293

    kernel-livepatch-sle15-sp4-rt_update_1Operating systems
    • Update to 11-150400.2.3
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. SUSE-SU-2023:3772-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214123). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213587). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP devi

    kernel-livepatch-sle15-sp4-rt_update_1Operating systems
    • Update to 10-150400.2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. SUSE-SU-2023:3671-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_ent

    kernel-livepatch-sle15-sp4-rt_update_1Operating systems
    • Update to 9-150400.2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. SUSE-SU-2023:2371-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_5 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500). - CVE-2023-0386: Fixed privileges escalation for low-privileged users in the OverlayFS subsystem (bsc#1210499). - CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209683). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662). - CVE-2023

    kernel-livepatch-sle15-sp4-rt_update_1Operating systems
    • Update to 6-150400.2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. SUSE-SU-2023:1975-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_5 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).

    kernel-livepatch-sle15-sp4-rt_update_1Operating systems
    • Update to 5-150400.2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. SUSE-SU-2023:1576-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_5 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-bounds write in rds_rm_zerocopy_callback (bsc#1208838). - CVE-2023-0266: Fixed a use-after-free vulnerability inside the ALSA PCM package. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 was missing locks that could have been used in a use-after-free that could have resulted in a priviledge escalation to gain ring0 access from the system user (bsc#1207190).

    kernel-livepatch-sle15-sp4-rt_update_1Operating systems
    • Update to 4-150400.2.3
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. SUSE-SU-2023:0320-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_5 fixes one issue. The following security issue was fixed: - CVE-2022-4379: Fixed a use-after-free vulnerability in nfs4file.c:__nfs42_ssc_open (bsc#1206209).

    kernel-livepatch-sle15-sp4-rt_update_1Operating systems
    • Update to 2-150400.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. SUSE-SU-2022:4617-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207). - CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114). - CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113). - CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113). - CVE-2022-3633: Fixed a memory leak in j1939_session_destroy of the file net/can/j1939/transport.c (bsc#1204650). - CVE-2022-3114: Fixed a d

    kernel-livepatch-sle15-sp4-rt_update_1Operating systems
    • Update to 1-150400.1.3.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →