File _patchinfo of Package patchinfo.23417

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.23417

<patchinfo incident="23417">
  <issue id="1195908" tracker="bnc">VUL-0: CVE-2022-0492: kernel live patch: cgroups v1 release_agent missing capabilities check</issue>
  <issue id="1195949" tracker="bnc">VUL-0: CVE-2022-0487: kernel live patch: moxart-mmc: use-after-free in moxart_remove</issue>
  <issue id="2022-0487" tracker="cve" />
  <issue id="2022-0492" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager> 
  <description>This update for the Linux Kernel 4.12.14-150_75 fixes several issues.

The following security issues were fixed:

- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
</description>
<summary>Security update for the Linux Kernel (Live Patch 25 for SLE 15)</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.23417

Places