File _patchinfo of Package patchinfo.23443

<patchinfo incident="23443">
  <issue id="1192991" tracker="bnc">VUL-0: CVE-2021-4001: kernel live patch: kernel: race condition when the EBPF map is frozen</issue>
  <issue id="1195908" tracker="bnc">VUL-0: CVE-2022-0492: kernel live patch: cgroups v1 release_agent missing capabilities check</issue>
  <issue id="1195949" tracker="bnc">VUL-0: CVE-2022-0487: kernel live patch: moxart-mmc: use-after-free in moxart_remove</issue>
  <issue id="1196301" tracker="bnc">VUL-0: CVE-2022-25636: kernel live patch: heap out of bounds write in nf_dup_netdev.c</issue>
  <issue id="2021-4001" tracker="cve" />
  <issue id="2022-0487" tracker="cve" />
  <issue id="2022-0492" tracker="cve" />
  <issue id="2022-25636" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager> 
  <description>This update for the Linux Kernel 5.3.18-59_16 fixes several issues.

The following security issues were fixed:

- CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, related to nf_tables_offload (bsc#1196299).
- CVE-2021-4001: Fixed a race condition when the EBPF map is frozen (bsc#1192990).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
</description>
<summary>Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP3)</summary>
</patchinfo>