SUSE-SU-2022:3061-1

SUSE-SU-2022:3061-1 · Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP3)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

This update for the Linux Kernel 5.3.18-59_34 fixes several issues. The following security issues were fixed: - CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a victim's TCP session or terminate that session (bsc#1196867). - CVE-2022-36946: Fixed a remote denial of service attack inside nfqnl_mangle in net/netfilter/nfnetlink_queue.c, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative length (bsc#1201941).

Fix available

Published

2022-09-06T14:04:39Z

Updated

2026-02-04T03:31:32.734353Z

Stack: system

Check your server →