p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости kernel-livepatch-sle15-sp3_update_30

За последние 30 дней в kernel-livepatch-sle15-sp3_update_30 опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 8

  1. SUSE-SU-2024:1246-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_115 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1218613). - CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219296).

    • Обновитесь до 13-150300.2.1
    Опубликовано Обновлено
  2. SUSE-SU-2024:0698-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_19 fixes several issues. The following security issues were fixed: - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalation (bsc#1215300). - CVE-2023-39198: Fixed a race condition leading to a use-after-free in qxl_mode_dumb_create() (bsc#1217116). - CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race condition (bsc#1218733).

    • Обновитесь до 11-150300.2.1
    Опубликовано Обновлено
  3. SUSE-SU-2024:0411-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_115 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255). - CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217522).

    • Обновитесь до 10-150300.2.1
    Опубликовано Обновлено
  4. SUSE-SU-2023:3928-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214123). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213587). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP devi

    • Обновитесь до 7-150300.2.1
    Опубликовано Обновлено
  5. SUSE-SU-2023:3627-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_115 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_

    • Обновитесь до 6-150300.2.1
    Опубликовано Обновлено
  6. SUSE-SU-2023:2701-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_115 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209672). - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989). - CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779). - CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).

    • Обновитесь до 4-150300.2.1
  7. SUSE-SU-2023:1645-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_115 fixes one issue. The following security issue was fixed: - CVE-2023-1078: Fixed a heap out-of-bounds write in rds_rm_zerocopy_callback (bsc#1208838).

    • Обновитесь до 2-150300.2.3
    Опубликовано Обновлено
  8. SUSE-SU-2023:0780-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#120

    • Обновитесь до 1-150300.7.3.1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →