p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости kgraft-patch-sle12-sp5_update_40

За последние 30 дней в kgraft-patch-sle12-sp5_update_40 опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 7

  1. SUSE-SU-2024:1153-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_150 fixes one issue. The following security issue was fixed: - CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218610).

    • Обновитесь до 13-2.3
    Опубликовано Обновлено
  2. SUSE-SU-2023:3582-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_150 fixes several issues. The following security issues were fixed: - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210630). - CVE-2023-3090: Fixed a heap out-of-bou

    • Обновитесь до 7-2.2
    Опубликовано Обновлено
  3. SUSE-SU-2023:3073-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_150 fixes several issues. The following security issues were fixed: - CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210566).

    • Обновитесь до 6-2.3
  4. SUSE-SU-2023:2399-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_150 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500). - CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209683). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662). - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).

    • Обновитесь до 4-2.2
  5. SUSE-SU-2023:1981-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_150 fixes one issue. The following security issue was fixed: - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).

    • Обновитесь до 3-2.2
    Опубликовано Обновлено
  6. SUSE-SU-2023:1599-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-150100_197_134 fixes one issue. The following security issue was fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).

    • Обновитесь до 2-2.3
    Опубликовано Обновлено
  7. SUSE-SU-2023:0634-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535). - CVE-2017-5754: Fixed speculative side channel attacks on various CPU platforms (bsc#1068032). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2022-4662: Fixed incorrect access control in the USB core sub

    • Обновитесь до 1-8.3.1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →