File _patchinfo of Package patchinfo.33526

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.33526

<patchinfo incident="33526">
  <issue id="1216644" tracker="bnc">VUL-0: CVE-2023-5717: kernel live patch: heap out-of-bounds write vulnerability related to perf_read_group() can be exploited to achieve local privilege escalation</issue>
  <issue id="1219435" tracker="bnc">VUL-0: CVE-2024-1086: kernel live patch: nf_tables: use-after-free vulnerability in the nft_verdict_init() function</issue>
  <issue id="1220828" tracker="bnc">VUL-0: CVE-2024-26622: kernel live patch: tomoyo: use after free in in tomoyo_write_control()</issue>
  <issue id="2023-5717" tracker="cve" />
  <issue id="2024-1086" tracker="cve" />
  <issue id="2024-26622" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager>
  <description>This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues.

The following security issues were fixed:

- CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644).
- CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828).
- CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation (bsc#1219435).
</description>
<summary>Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.33526

Places