Описание
Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_125 fixes one issue.
The following security issue was fixed:
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
Список пакетов
SUSE Linux Enterprise Live Patching 12 SP4
kgraft-patch-4_12_14-95_125-default-2-2.1
Ссылки
- Link for SUSE-SU-2023:2720-1
- E-Mail link for SUSE-SU-2023:2720-1
- SUSE Security Ratings
- SUSE Bug 1210989
- SUSE CVE CVE-2023-31436 page
Описание
qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.
Затронутые продукты
SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_125-default-2-2.1
Ссылки
- CVE-2023-31436
- SUSE Bug 1210940
- SUSE Bug 1211260
- SUSE Bug 1213841
- SUSE Bug 1213842
- SUSE Bug 1214128
- SUSE Bug 1223091
- SUSE Bug 1224419