Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE 15 SP4: 2024:0515-1 Important: Kernel Fixes and Security Risks

suse
Calendar Grey February 15, 2024
Dist Suse Esm H88
This critical software patch resolves several vulnerabilities within the Linux kernel on Red Hat systems, necessitating prompt response.
* bsc#1108281 * bsc#1177529 * bsc#1209834 * bsc#1212091 * bsc#1215275

Summary

## The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219429). * CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation (bsc#1219434). * CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128). * CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race condition (bsc#1218730). * CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length

References

* bsc#1108281

* bsc#1177529

* bsc#1209834

* bsc#1212091

* bsc#1215275

* bsc#1215885

* bsc#1216016

* bsc#1216702

* bsc#1217217

* bsc#1217670

* bsc#1217895

* bsc#1217987

* bsc#1217988

* bsc#1217989

* bsc#1218689

* bsc#1218713

* bsc#1218730

* bsc#1218752

* bsc#1218757

* bsc#1218768

* bsc#1218804

* bsc#1218832

* bsc#1218836

* bsc#1218916

* bsc#1218929

* bsc#1218930

* bsc#1218968

* bsc#1219053

* bsc#1219120

* bsc#1219128

* bsc#1219349

* bsc#1219412

* bsc#1219429

* bsc#1219434

* bsc#1219490

* bsc#1219608

Cross-

* CVE-2021-33631

* CVE-2023-46838

* CVE-2023-47233

* CVE-2023-4921

* CVE-2023-51042

* CVE-2023-51043

* CVE-2023-51780

* CVE-2023-51782

* CVE-2023-6040

* CVE-2023-6356

* CVE-2023-6535

* CVE-2023-6536

* CVE-2023-6915

* CVE-2024-0340

* CVE-2024-0565

* CVE-2024-0641

* CVE-2024-0775

* CVE-2024-1085

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2024:0515-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here