Описание
Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_148 fixes one issue.
The following security issue was fixed:
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
Список пакетов
SUSE Linux Enterprise Live Patching 15 SP2
kernel-livepatch-5_3_18-150200_24_148-default-3-150200.2.1
Ссылки
- Link for SUSE-SU-2023:2700-1
- E-Mail link for SUSE-SU-2023:2700-1
- SUSE Security Ratings
- SUSE Bug 1210989
- SUSE CVE CVE-2023-31436 page
Описание
qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.
Затронутые продукты
SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-150200_24_148-default-3-150200.2.1
Ссылки
- CVE-2023-31436
- SUSE Bug 1210940
- SUSE Bug 1211260
- SUSE Bug 1213841
- SUSE Bug 1213842
- SUSE Bug 1214128
- SUSE Bug 1223091
- SUSE Bug 1224419