p PatchFirst

PatchFirst · Latest vulnerabilities

kernel-livepatch-sle15-sp4-rt_update_7 vulnerabilities

Vulnerabilities published for kernel-livepatch-sle15-sp4-rt_update_7 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 5

  1. SUSE-SU-2023:4166-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1215118). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440). - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1214812). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212934)

    kernel-livepatch-sle15-sp4-rt_update_7Operating systems
    • Update to 7-150400.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. SUSE-SU-2023:3675-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_28 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839). - CVE-2023-3090: Fixed a heap out-of-

    kernel-livepatch-sle15-sp4-rt_update_7Operating systems
    • Update to 5-150400.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. SUSE-SU-2023:3041-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_28 fixes one issue. The following security issue was fixed: - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212509).

    kernel-livepatch-sle15-sp4-rt_update_7Operating systems
    • Update to 4-150400.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. SUSE-SU-2023:2231-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210986). - CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992). - CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potential

    kernel-livepatch-sle15-sp4-rt_update_7Operating systems
    • Update to 1-150400.1.5.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →