File _patchinfo of Package patchinfo.26802

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.26802

<patchinfo incident="26802">
  <issue id="1202087" tracker="bnc">VUL-0: CVE-2021-33655: kernel live patch: Out of bounds write with ioctl cmd FBIOPUT_VSCREENINFO</issue>
  <issue id="1203613" tracker="bnc">VUL-0: CVE-2022-2588: kernel live patch: use-after-free in cls_route</issue>
  <issue id="1204170" tracker="bnc">VUL-0: CVE-2022-42703: kernel live patch: mm/rmap.c has a use-after-free related to leaf anon_vma double reuse.</issue>
  <issue id="1204289" tracker="bnc">VUL-0: CVE-2022-42722: kernel live patch: remote denial of service in wlan beacon p2p processing</issue>
  <issue id="1204381" tracker="bnc">kernel livepatch for: execve() incorrectly handles empty argv array</issue>
  <issue id="2021-33655" tracker="cve" />
  <issue id="2022-2588" tracker="cve" />
  <issue id="2022-42703" tracker="cve" />
  <issue id="2022-42722" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager>
  <description>This update for the Linux Kernel 5.3.18-59_37 fixes several issues.

The following security issues were fixed:

- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).
- CVE-2022-42722: Fixed crash in beacon protection for P2P-device. (bsc#1204125)

- Fixed incorrect handling of empty arguments array in execve() (bsc#1200571).
</description>
<summary>Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP3)</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.26802

Places