gpp_maybe Security update for the linux kernel (live patch 3 for sle 15 sp5)

SUSE-SLE-Module-Live-Patching-15-SP5-2024-1238

This update for the Linux Kernel 5.14.21-150500_55_19 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1218613). - CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219432). - CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219296).

• Release Date
  Apr 11 2024
• References
  Bugzilla: 1218613, 1219078, 1219296, 1219432
  CVEs: CVE-2023-42753, CVE-2023-52340, CVE-2024-0565, CVE-2024-1085
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15.5 s390x

• Packages
  kernel-livepatch-5_14_21-150500_55_19-default
  Kernel live patch module

  8-150500.2.1 lock rpm

  kernel-livepatch-SLE15-SP5_Update_3
  Kernel live patch module

  8-150500.2.1 lock src

SUSE Linux Enterprise Live Patching 15.5 ppc64le

• Packages
  kernel-livepatch-5_14_21-150500_55_19-default
  Kernel live patch module

  8-150500.2.1 lock rpm

  kernel-livepatch-SLE15-SP5_Update_3
  Kernel live patch module

  8-150500.2.1 lock src

SUSE Linux Enterprise Live Patching 15.5 x86_64

• Packages
  kernel-livepatch-5_14_21-150500_55_19-default
  Kernel live patch module

  8-150500.2.1 lock rpm

  kernel-livepatch-SLE15-SP5_Update_3
  Kernel live patch module

  8-150500.2.1 lock src