1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2022:4587-1

[SUSE-SU-2022:4587-1] Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP2)

Severity Important
CVEs 8
Info References Vulnerabilities

Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-24_107 fixes several issues.

The following security issues were fixed:

  • CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
  • CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
  • CVE-2022-4139: Fixed an issue with the i915 driver that allowed the GPU to access any physical memory (bsc#1205700).
  • CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
  • CVE-2022-3577: Fixed an out-of-bounds memory write in bigben_probe of drivers/hid/hid-bigbenff.c (bsc#1204470).
  • CVE-2022-3545: Fixed a use-after-free in area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
  • CVE-2022-41218: Fixed a use-after-free caused by refcount races, affecting dvb_demux_open() and dvb_dmxdev_release() in drivers/media/dvb-core/dmxdev.c (bsc#1202960).
  • CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
ID
SUSE-SU-2022:4587-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2022/suse-su-20224587-1/
Published
2022-12-20T12:34:02
(21 months ago)
Modified
2022-12-20T12:34:02
(21 months ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Source # ID Name URL
Suse SUSE ratings https://www.suse.com/support/security/rating/
Suse URL of this CSAF notice https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_4587-1.json
Suse URL for SUSE-SU-2022:4587-1 https://www.suse.com/support/update/announcement/2022/suse-su-20224587-1/
Suse E-Mail link for SUSE-SU-2022:4587-1 https://lists.suse.com/pipermail/sle-security-updates/2022-December/013292.html
Bugzilla SUSE Bug 1203008 https://bugzilla.suse.com/1203008
Bugzilla SUSE Bug 1203606 https://bugzilla.suse.com/1203606
Bugzilla SUSE Bug 1204424 https://bugzilla.suse.com/1204424
Bugzilla SUSE Bug 1204486 https://bugzilla.suse.com/1204486
Bugzilla SUSE Bug 1204576 https://bugzilla.suse.com/1204576
Bugzilla SUSE Bug 1205130 https://bugzilla.suse.com/1205130
Bugzilla SUSE Bug 1205815 https://bugzilla.suse.com/1205815
Bugzilla SUSE Bug 1206228 https://bugzilla.suse.com/1206228
CVE SUSE CVE CVE-2022-2964 page https://www.suse.com/security/cve/CVE-2022-2964/
CVE SUSE CVE CVE-2022-3545 page https://www.suse.com/security/cve/CVE-2022-3545/
CVE SUSE CVE CVE-2022-3577 page https://www.suse.com/security/cve/CVE-2022-3577/
CVE SUSE CVE CVE-2022-3586 page https://www.suse.com/security/cve/CVE-2022-3586/
CVE SUSE CVE CVE-2022-41218 page https://www.suse.com/security/cve/CVE-2022-41218/
CVE SUSE CVE CVE-2022-4139 page https://www.suse.com/security/cve/CVE-2022-4139/
CVE SUSE CVE CVE-2022-4378 page https://www.suse.com/security/cve/CVE-2022-4378/
CVE SUSE CVE CVE-2022-43945 page https://www.suse.com/security/cve/CVE-2022-43945/
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date