suse/kgraft-patch-SLE12-SP4_Update_27&distro=SUSE Linux Enterprise Live Patching 12 SP4

Vulnerabilities (43)

• CVE-2022-2588Jan 8, 2024
  affected < 6-2.1fixed 6-2.1

  It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

• CVE-2023-2162Apr 19, 2023
  affected < 12-2.2fixed 12-2.2

  A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.

• CVE-2023-1989Apr 11, 2023
  affected < 12-2.2fixed 12-2.2

  A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices.

• CVE-2023-28464Mar 31, 2023
  affected < 12-2.2fixed 12-2.2

  hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escalation.

• CVE-2023-0590Mar 23, 2023
  affected < 11-2.2fixed 11-2.2

  A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, then kernel could be affected.

• CVE-2022-3424Mar 6, 2023
  affected < 8-2.1fixed 8-2.1

  A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate

• CVE-2023-1118Mar 2, 2023
  affected < 11-2.2fixed 11-2.2

  A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

• CVE-2023-23454Jan 12, 2023
  affected < 12-2.2fixed 12-2.2

  cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).

• CVE-2022-4378Jan 5, 2023
  affected < 7-2.1fixed 7-2.1

  A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.

• CVE-2022-43945HigNov 4, 2022
  affected < 7-2.1fixed 7-2.1

  The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client c

• CVE-2022-3586Oct 19, 2022
  affected < 7-2.1fixed 7-2.1

  A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to cra

• CVE-2022-3565Oct 17, 2022
  affected < 8-2.1fixed 8-2.1

  A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function del_timer of the file drivers/isdn/mISDN/l1oip_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch

• CVE-2022-3545Oct 17, 2022
  affected < 7-2.1fixed 7-2.1

  A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is re

• CVE-2022-42703Oct 9, 2022
  affected < 6-2.1fixed 6-2.1

  mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.

• CVE-2022-41218Sep 21, 2022
  affected < 7-2.1fixed 7-2.1

  In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.

• CVE-2022-39188Sep 2, 2022
  affected < 5-2.2fixed 5-2.2

  An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries. This only occurs in situations with VM_PFNMAP VMAs.

• CVE-2022-1729Sep 1, 2022
  affected < 2-2.1fixed 2-2.1

  A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

• CVE-2022-2991Aug 25, 2022
  affected < 11-2.2fixed 11-2.2

  A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalat

• CVE-2022-36946Jul 27, 2022
  affected < 4-2.2fixed 4-2.2

  nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.

• CVE-2021-33655Jul 18, 2022
  affected < 6-2.1fixed 6-2.1

  When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.