gpp_maybe Security update for the linux kernel (live patch 2 for sle 15 sp4)

SUSE-SLE-Module-Live-Patching-15-SP4-2023-272

This update for the Linux Kernel 5.14.21-150400_24_18 fixes several issues. The following security issues were fixed: - CVE-2022-4379: A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allowed an attacker to conduct a remote denial of service attack (bsc#1206373). - CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204167). - CVE-2022-2602: Fixed a local privilege escalation vulnerability involving Unix socket Garbage Collection and io_uring (bsc#1205186).

• Release Date
  Feb 6 2023
• References
  Bugzilla: 1204167, 1205186, 1206373
  CVEs: CVE-2022-2602, CVE-2022-3424, CVE-2022-4379
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15.4 ppc64le

• Packages
  kernel-livepatch-5_14_21-150400_24_18-default
  Kernel live patch module

  7-150400.2.1 lock rpm

  kernel-livepatch-SLE15-SP4_Update_2
  Kernel live patch module

  7-150400.2.1 lock src

SUSE Linux Enterprise Live Patching 15.4 s390x

• Packages
  kernel-livepatch-5_14_21-150400_24_18-default
  Kernel live patch module

  7-150400.2.1 lock rpm

  kernel-livepatch-SLE15-SP4_Update_2
  Kernel live patch module

  7-150400.2.1 lock src

SUSE Linux Enterprise Live Patching 15.4 x86_64

• Packages
  kernel-livepatch-5_14_21-150400_24_18-default
  Kernel live patch module

  7-150400.2.1 lock rpm

  kernel-livepatch-SLE15-SP4_Update_2
  Kernel live patch module

  7-150400.2.1 lock src