File _patchinfo of Package patchinfo.33697

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.33697

<patchinfo incident="33697">
  <issue id="1216644" tracker="bnc">VUL-0: CVE-2023-5717: kernel live patch: heap out-of-bounds write vulnerability related to perf_read_group() can be exploited to achieve local privilege escalation</issue>
  <issue id="1219079" tracker="bnc">VUL-0: CVE-2024-0775: kernel live patch: use-after-free while changing the mount option in __ext4_remount leading</issue>
  <issue id="1219435" tracker="bnc">VUL-0: CVE-2024-1086: kernel live patch: nf_tables: use-after-free vulnerability in the nft_verdict_init() function</issue>
  <issue id="1220828" tracker="bnc">VUL-0: CVE-2024-26622: kernel live patch: tomoyo: use after free in in tomoyo_write_control()</issue>
  <issue id="2023-5717" tracker="cve" />
  <issue id="2024-0775" tracker="cve" />
  <issue id="2024-1086" tracker="cve" />
  <issue id="2024-26622" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager>
  <description>This update for the Linux Kernel 5.3.18-150300_59_141 fixes several issues.

The following security issues were fixed:

- CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079).
- CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability perf component (bsc#1216644).
- CVE-2024-26622: Fixed a use-after-free bug in tomoyo_write_control() (bsc#1220828).
- CVE-2024-1086: Fixed a use-after-free vulnerability related to nft_verdict_init() (bsc#1219435).
</description>
<summary>Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP3)</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.33697

Places