SUSE SLES12: kernel-livepatch-5_14_21-150400_24_46-default / etc (SUSE-SU-2023:2703-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2703-1 advisory. This update for the Linux Kernel 4.12.14-122156 fixes several issues. The following security issues were fixed: - CVE-2023-31436: Fixe...

SUSE SLES15: kernel-livepatch-5_14_21-150400_24_60-default / etc (SUSE-SU-2023:2734-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:2734-1 advisory. This update for the Linux Kernel 5.14.21-1504002460 fixes one issue. The following security issue was fixed: - CVE-2023-31436: Fixed an out-of-bounds...

SUSE SLES12 Security Update : kernel (Live Patch 35 for SLE 12 SP4) (SUSE-SU-2023:2720-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:2720-1 advisory. This update for the Linux Kernel 4.12.14-95125 fixes one issue. The following security issue was fixed: - CVE-2023-31436: Fixed an out-of-bounds write ...

SUSE-SU-2023:2734-1 Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504002460 fixes one issue. The following security issue was fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfqchangeclass because lmax can exceed QFQMINLMAX bsc1210989...

SUSE-SU-2023:2731-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504002455 fixes several issues. The following security issues were fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfqchangeclass because lmax can exceed QFQMINLMAX bsc1210989. - CVE-2023-28466: Fixed race condition that could lead to...

SUSE-SU-2023:2720-1 Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP4)

This update for the Linux Kernel 4.12.14-95125 fixes one issue. The following security issue was fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfqchangeclass because lmax can exceed QFQMINLMAX bsc1210989...

SUSE-SU-2023:2709-1 Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059118 fixes one issue. The following security issue was fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfqchangeclass because lmax can exceed QFQMINLMAX bsc1210989...

SUSE-SU-2023:2701-1 Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059115 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality bsc1209672. - CVE-2023-31436: Fixed an out-of-bounds write i...

SUSE SLES15 Security Update : kernel (Live Patch 33 for SLE 15 SP2) (SUSE-SU-2023:2698-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2698-1 advisory. This update for the Linux Kernel 5.3.18-15020024142 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed...

SUSE-SU-2023:2700-1 Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024148 fixes one issue. The following security issue was fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfqchangeclass because lmax can exceed QFQMINLMAX bsc1210989...

SUSE-SU-2023:2698-1 Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024142 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality bsc1209672. - CVE-2023-31436: Fixed an out-of-bounds write i...

SUSE-SU-2023:2697-1 Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504001511 fixes several issues. The following security issues were fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfqchangeclass because lmax can exceed QFQMINLMAX bsc1210989. - CVE-2023-28466: Fixed race condition that could lead to...

LSN-0095-1: Kernel Live Patch Security Notice

It was discovered that the OverlayFS implementation in the Linux kernel did not properly handle copy up operation in some conditions. A local attacker could possibly use this to gain elevated privileges.CVE-2023-0386 It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel...

USN-6173-1 linux-oem-6.1 vulnerabilities

Gwangun Jung discovered that the Quick Fair Queueing scheduler implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-31436 It was discovered that the...

SUSE: Security Advisory (SUSE-SU-2023:2507-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-31436 affecting package kernel 5.10.179.1-1

CVE-2023-31436 affecting package kernel 5.10.179.1-1. A patched version of the package is available...

SUSE-SU-2023:2502-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol bsc1211131. - CVE-2023-1637: Fixed vulnerability that could le...

[SECURITY] [DLA 3446-1] linux-5.10 security update

Debian LTS Advisory DLA-3446-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings June 05, 2023 https://wiki.debian.org/LTS Package : linux-5.10 Version : 5.10.179-1deb10u1 CVE ID : CVE-2023-0386 CVE-2023-31436 CVE-2023-32233 Debian Bug : 1035779 Several vulnerabilitie...

Ubuntu: Security Advisory (USN-6135-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-31436)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-31436 advisory. - qfqchangeclass in net/sched/schqfq.c in the Linux kernel before 6.2.13 allows an...