p PatchFirst

PatchFirst · Latest vulnerabilities

kernel-livepatch-sle15-sp4_update_18 vulnerabilities

Vulnerabilities published for kernel-livepatch-sle15-sp4_update_18 in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 9

  1. SUSE-SU-2024:3805-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_88 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). - CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). - CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). - CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). - Intermitten

    • Update to 15-150400.2.1
    Published Updated
  2. SUSE-SU-2024:3706-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_36 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). - CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).

    • Update to 14-150400.2.1
    Published Updated
  3. SUSE-SU-2024:3425-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_88 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). - CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).

    • Update to 13-150400.2.2
    Published Updated
  4. SUSE-SU-2024:1406-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_31 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation (bsc#1219435).

    • Update to 8-150400.2.1
    Published Updated
  5. SUSE-SU-2024:0685-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues. The following security issues were fixed: - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalation (bsc#1215300). - CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race condition (bsc#1218733).

    • Update to 5-150400.2.1
    Published Updated
  6. SUSE-SU-2024:0421-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_7 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255). - CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217522). - CVE-2023-5178: Fixed a use-after-free vulnerability in queue intialization setup (bsc#1215768).

    • Update to 4-150400.2.1
    Published Updated
  7. SUSE-SU-2023:4801-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_88 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215097) - CVE-2023-5345: Fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215971) - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215442). - CVE-2023-2163: Fixed an incorrect ver

    • Update to 3-150400.2.1
    Published Updated
  8. SUSE-SU-2023:4328-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_28 fixes one issue. The following security issue was fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440).

    • Update to 2-150400.2.1
    Published Updated
  9. SUSE-SU-2023:3969-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546). - CVE-2023-3610: Fixed use-after-free vulnerabilit

    • Update to 1-150400.9.3.1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →