gpp_maybe
Security update for the linux kernel (live patch 42 for sle 15 sp3)
SUSE-SLE-Module-Live-Patching-15-SP3-2024-2148
This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). - CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685). - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
-
Release DateJun 21 2024
-
ReferencesBugzilla: 1210619, 1218487, 1220537, 1221302, 1222685, 1223059, 1223514
CVEs: CVE-2021-46955, CVE-2022-48651, CVE-2023-1829, CVE-2023-6531, CVE-2023-6546, CVE-2024-26610, CVE-2024-26852 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Live Patching 15.3 ppc64le
-
Packageskernel-livepatch-5_3_18-150300_59_153-default
Kernel live patch modulekernel-livepatch-SLE15-SP3_Update_424-150300.7.6.2 lock rpm
Kernel live patch module4-150300.7.6.2 lock src
SUSE Linux Enterprise Live Patching 15.3 s390x
-
Packageskernel-livepatch-5_3_18-150300_59_153-default
Kernel live patch modulekernel-livepatch-SLE15-SP3_Update_424-150300.7.6.2 lock rpm
Kernel live patch module4-150300.7.6.2 lock src
SUSE Linux Enterprise Live Patching 15.3 x86_64
-
Packageskernel-livepatch-5_3_18-150300_59_153-default
Kernel live patch modulekernel-livepatch-SLE15-SP3_Update_424-150300.7.6.2 lock rpm
Kernel live patch module4-150300.7.6.2 lock src