File _patchinfo of Package patchinfo.28736

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.28736

<patchinfo incident="28736">
  <issue id="1207822" tracker="bnc">VUL-0: CVE-2023-0590: kernel live patch: Kernel: use-after-free due to race condition in qdisc_graft()</issue>
  <issue id="1208910" tracker="bnc">VUL-0: CVE-2023-1118: kernel live patch: UAF drivers/media/rc directory</issue>
  <issue id="1209797" tracker="bnc">VUL-0: CVE-2023-1652: kernel live patch: use-after-free in nfsd4_ssc_setup_dul() in fs/nfsd/nfs4proc.c</issue>
  <issue id="2023-0590" tracker="cve" />
  <issue id="2023-1118" tracker="cve" />
  <issue id="2023-1652" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager>
  <description>This update for the Linux Kernel 5.14.21-150400_24_18 fixes several issues.

The following security issues were fixed:

- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
</description>
<summary>Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP4)</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.28736

Places