File _patchinfo of Package patchinfo.32428
<patchinfo incident="32428">
<issue id="1216044" tracker="bnc">VUL-0: CVE-2023-5178: kernel live patches: NVMe-of/TCP Security Issue</issue>
<issue id="1217522" tracker="bnc">VUL-0: CVE-2023-6176: kernel live patch: local dos vulnerability in scatterwalk_copychunks</issue>
<issue id="1218255" tracker="bnc">VUL-0: CVE-2023-6932: kernel live patch: use-after-free in IPv4 IGMP</issue>
<issue id="2023-5178" tracker="cve" />
<issue id="2023-6176" tracker="cve" />
<issue id="2023-6932" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>nstange</packager>
<description>This update for the Linux Kernel 5.14.21-150400_24_66 fixes several issues.
The following security issues were fixed:
- CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).
- CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217522).
- CVE-2023-5178: Fixed a use-after-free vulnerability in queue intialization setup (bsc#1215768).
</description>
<summary>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP4)</summary>
</patchinfo>