File _patchinfo of Package patchinfo.33114

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.33114

<patchinfo incident="33114">
  <issue id="1218487" tracker="bnc">VUL-0: CVE-2023-6531: kernel live patch: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF</issue>
  <issue id="1218610" tracker="bnc">VUL-0: CVE-2023-51779: kernel live patch: bluetooth: bt_sock_ioctl race condition leads to use-after-free in bt_sock_recvmsg</issue>
  <issue id="1219157" tracker="bnc">IO lock-ups on HBA355i with SLES 15SP5</issue>
  <issue id="2023-51779" tracker="cve" />
  <issue id="2023-6531" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager>
  <description>This update for the Linux Kernel 5.14.21-150500_55_36 fixes several issues.

The following security issues were fixed:

- CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487).
- CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218610).
- Recommended fix for IO lock-ups on HBA355i with SLES 15SP5. (bsc#1219157)
</description>
<summary>Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.33114

Places