File _patchinfo of Package patchinfo.26817

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.26817

<patchinfo incident="26817">
  <issue id="1200058" tracker="bnc">VUL-0: CVE-2022-1882: kernel live patch: Use-After-Free in free_pipe_info() could cause an escalation of privileges</issue>
  <issue id="1202087" tracker="bnc">VUL-0: CVE-2021-33655: kernel live patch: Out of bounds write with ioctl cmd FBIOPUT_VSCREENINFO</issue>
  <issue id="1202685" tracker="bnc">VUL-0: CVE-2022-2959: kernel live patch: watch queue race condition can lead to privilege escalation</issue>
  <issue id="1203613" tracker="bnc">VUL-0: CVE-2022-2588: kernel live patch: use-after-free in cls_route</issue>
  <issue id="1204170" tracker="bnc">VUL-0: CVE-2022-42703: kernel live patch: mm/rmap.c has a use-after-free related to leaf anon_vma double reuse.</issue>
  <issue id="1204289" tracker="bnc">VUL-0: CVE-2022-42722: kernel live patch: remote denial of service in wlan beacon p2p processing</issue>
  <issue id="1204381" tracker="bnc">kernel livepatch for: execve() incorrectly handles empty argv array</issue>
  <issue id="2021-33655" tracker="cve" />
  <issue id="2022-1882" tracker="cve" />
  <issue id="2022-2588" tracker="cve" />
  <issue id="2022-2959" tracker="cve" />
  <issue id="2022-42703" tracker="cve" />
  <issue id="2022-42722" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager>
  <description>This update for the Linux Kernel 5.14.21-150400_22 fixes several issues.

The following security issues were fixed:

- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2022-1882: Fixed a use-after-free flaw in free_pipe_info() that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1199904).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-2959: Fixed a race condition that was found inside the watch queue due to a missing lock in pipe_resize_ring() (bnc#1202681).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).
- CVE-2022-42722: Fixed crash in beacon protection for P2P-device. (bsc#1204125)

- Fixed incorrect handling of empty arguments array in execve() (bsc#1200571).
</description>
<summary>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4)</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.26817

Places