File _patchinfo of Package patchinfo.23450

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.23450

<patchinfo incident="23450">
  <issue id="1195908" tracker="bnc">VUL-0: CVE-2022-0492: kernel live patch: cgroups v1 release_agent missing capabilities check</issue>
  <issue id="1196301" tracker="bnc">VUL-0: CVE-2022-25636: kernel live patch: heap out of bounds write in nf_dup_netdev.c</issue>
  <issue id="2022-0492" tracker="cve" />
  <issue id="2022-25636" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager> 
  <description>This update for the Linux Kernel 5.3.18-150300_59_43 fixes several issues.

The following security issues were fixed:

- CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, related to nf_tables_offload (bsc#1196299).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
</description>
<summary>Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP3)</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.23450

Places