Lucene search

K
osvGoogleOSV:SUSE-SU-2024:2099-1
HistoryJun 19, 2024 - 2:34 p.m.

Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP5)

2024-06-1914:34:01
Google
osv.dev
linux kernel
security update
cve-2023-6931
cve-2024-26852
sle 15 sp5
live patch

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

Low

This update for the Linux Kernel 5.14.21-150500_13_27 fixes several issues.

The following security issues were fixed:

  • CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218259).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

Low