p PatchFirst

PatchFirst · Latest vulnerabilities

kernel-livepatch-sle15-sp4_update_19 vulnerabilities

Vulnerabilities published for kernel-livepatch-sle15-sp4_update_19 in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 10

  1. SUSE-SU-2024:3799-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_92 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). - CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). - CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). - CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). - Intermitten

    • Update to 14-150400.2.1
    Published Updated
  2. SUSE-SU-2024:3643-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_92 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). - CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).

    • Update to 13-150400.2.1
    Published Updated
  3. SUSE-SU-2024:3361-1

    Not ratedFix available

    Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_11 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). - CVE-2022-48662: Fixed GPF in i915_perf_open_ioctl (bsc#1223521). - CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).

    • Update to 12-150400.2.2
    Published Updated
  4. SUSE-SU-2024:1757-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). - CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882). - CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832). - CVE-2024-26585: Fixed race between tx work scheduling and sock

    • Update to 8-150400.2.1
    Published Updated
  5. SUSE-SU-2024:1418-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_92 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation (bsc#1219435).

    • Update to 7-150400.2.1
    Published Updated
  6. SUSE-SU-2024:1292-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_92 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219432). - CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219296).

    • Update to 6-150400.2.1
    Published Updated
  7. SUSE-SU-2024:0378-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255). - CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217522). - CVE-2023-5178: Fixed a use-after-free vulnerability in queue intialization setup (bsc#1215768).

    • Update to 3-150400.2.1
    Published Updated
  8. SUSE-SU-2023:4867-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_31 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215097) - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215519)

    • Update to 2-150400.2.1
    Published Updated
  9. SUSE-SU-2023:4072-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-4563: Fixed an use-after-free flaw in the nftables sub-component. This vulnerability could allow a local attacker to crash the system or lead to a kernel information leak problem. (bsc#1214727) - CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215861) - CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215860) - CVE-

    • Update to 1-150400.9.3.1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →