SUSE-SU-2022:2515-1
SUSE-SU-2022:2515-1 · Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP3)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 5.3.18-150300_59_71 fixes several issues. The following security issues were fixed: - CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599). - CVE-2021-39698: Fixed a possible memory corruption due to a use after free in aio_poll_complete_work. This could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1196956)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp3_update_19 SUSE:Linux Enterprise Live Patching 15 SP3
- Affected ranges
- ECOSYSTEM: < 3-150300.2.2
Update to 3-150300.2.2