File _patchinfo of Package patchinfo.32430

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.32430

<patchinfo incident="32430">
  <issue id="1216044" tracker="bnc">VUL-0: CVE-2023-5178: kernel live patches: NVMe-of/TCP Security Issue</issue>
  <issue id="1217522" tracker="bnc">VUL-0: CVE-2023-6176: kernel live patch: local dos vulnerability in scatterwalk_copychunks</issue>
  <issue id="1218255" tracker="bnc">VUL-0: CVE-2023-6932: kernel live patch: use-after-free in IPv4 IGMP</issue>
  <issue id="2023-5178" tracker="cve" />
  <issue id="2023-6176" tracker="cve" />
  <issue id="2023-6932" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager>
  <description>This update for the Linux Kernel 5.14.21-150400_24_74 fixes several issues.

The following security issues were fixed:

- CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).
- CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217522).
- CVE-2023-5178: Fixed a use-after-free vulnerability in queue intialization setup (bsc#1215768).
</description>
<summary>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP4)</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.32430

Places