Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1)

Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1)

Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4)

Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP3)

Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP4)

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

ELSA-2024-0346: kernel security and bug fix update (IMPORTANT)

ELSA-2023-12915: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2023-12914: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2023-12826: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2023-12825: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2023-12824: Unbreakable Enterprise kernel security update (IMPORTANT)

Уязвимость модуля net/netfilter/ipset/ip_set_hash_netportnet.c. ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации или повысить свои привилегии

Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP5)

Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1)

Security update for the Linux Kernel (Live Patch 42 for SLE 12 SP5)

Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP1)

A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.

Уязвимость функции unix_stream_sendpage() в модуле net/unix/af_unix.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации или повысить свои привилегии

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4)