gpp_maybe Security update for the linux kernel (live patch 31 for sle 15 sp3)

SUSE-SLE-Module-Live-Patching-15-SP3-2024-1237

This update for the Linux Kernel 5.3.18-150300_59_118 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1218613). - CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219296).

• Release Date
  Apr 11 2024
• References
  Bugzilla: 1218613, 1219078, 1219296
  CVEs: CVE-2023-42753, CVE-2023-52340, CVE-2024-0565
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15.3 s390x

• Packages
  kernel-livepatch-5_3_18-150300_59_118-default
  Kernel live patch module

  12-150300.2.1 lock rpm

  kernel-livepatch-SLE15-SP3_Update_31
  Kernel live patch module

  12-150300.2.1 lock src

SUSE Linux Enterprise Live Patching 15.3 ppc64le

• Packages
  kernel-livepatch-5_3_18-150300_59_118-default
  Kernel live patch module

  12-150300.2.1 lock rpm

  kernel-livepatch-SLE15-SP3_Update_31
  Kernel live patch module

  12-150300.2.1 lock src

SUSE Linux Enterprise Live Patching 15.3 x86_64

• Packages
  kernel-livepatch-5_3_18-150300_59_118-default
  Kernel live patch module

  12-150300.2.1 lock rpm

  kernel-livepatch-SLE15-SP3_Update_31
  Kernel live patch module

  12-150300.2.1 lock src