gpp_maybe Security update for the linux kernel (live patch 18 for sle 15 sp3)

SUSE-SLE-Module-Live-Patching-15-SP3-2022-2759

This update for the Linux Kernel 5.3.18-150300_59_68 fixes several issues. The following security issues were fixed: - CVE-2022-34918: Fixed a buffer overflow with nft_set_elem_init() that could be used by a local attacker to escalate privileges (bnc#1201171). - CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487). - CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).

• Release Date
  Aug 10 2022
• References
  Bugzilla: 1200605, 1201080, 1201222
  CVEs: CVE-2022-1679, CVE-2022-20141, CVE-2022-34918
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15.3 ppc64le

• Packages
  kernel-livepatch-5_3_18-150300_59_68-default
  Kernel live patch module

  5-150300.2.2 lock rpm

  kernel-livepatch-SLE15-SP3_Update_18
  Kernel live patch module

  5-150300.2.2 lock src

SUSE Linux Enterprise Live Patching 15.3 s390x

• Packages
  kernel-livepatch-5_3_18-150300_59_68-default
  Kernel live patch module

  5-150300.2.2 lock rpm

  kernel-livepatch-SLE15-SP3_Update_18
  Kernel live patch module

  5-150300.2.2 lock src

SUSE Linux Enterprise Live Patching 15.3 x86_64

• Packages
  kernel-livepatch-5_3_18-150300_59_68-default
  Kernel live patch module

  5-150300.2.2 lock rpm

  kernel-livepatch-SLE15-SP3_Update_18
  Kernel live patch module

  5-150300.2.2 lock src