p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости kernel-livepatch-sle15-sp4-rt_update_7

За последние 30 дней в kernel-livepatch-sle15-sp4-rt_update_7 опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 5

  1. SUSE-SU-2023:4166-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1215118). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440). - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1214812). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212934)

    • Обновитесь до 7-150400.2.1
    Опубликовано Обновлено
  2. SUSE-SU-2023:3675-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_28 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839). - CVE-2023-3090: Fixed a heap out-of-

    • Обновитесь до 5-150400.2.1
    Опубликовано Обновлено
  3. SUSE-SU-2023:3041-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_28 fixes one issue. The following security issue was fixed: - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212509).

    • Обновитесь до 4-150400.2.1
  4. SUSE-SU-2023:2367-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_28 fixes one issue. The following security issue was fixed: - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).

    • Обновитесь до 2-150400.2.2
  5. SUSE-SU-2023:2231-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210986). - CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992). - CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potential

    • Обновитесь до 1-150400.1.5.2

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →