File _patchinfo of Package patchinfo.33513

<patchinfo incident="33513">
  <issue id="1216644" tracker="bnc">VUL-0: CVE-2023-5717: kernel live patch: heap out-of-bounds write vulnerability related to perf_read_group() can be exploited to achieve local privilege escalation</issue>
  <issue id="1219079" tracker="bnc">VUL-0: CVE-2024-0775: kernel live patch: use-after-free while changing the mount option in __ext4_remount leading</issue>
  <issue id="1219435" tracker="bnc">VUL-0: CVE-2024-1086: kernel live patch: nf_tables: use-after-free vulnerability in the nft_verdict_init() function</issue>
  <issue id="1220828" tracker="bnc">VUL-0: CVE-2024-26622: kernel live patch: tomoyo: use after free in in tomoyo_write_control()</issue>
  <issue id="2023-5717" tracker="cve" />
  <issue id="2024-0775" tracker="cve" />
  <issue id="2024-1086" tracker="cve" />
  <issue id="2024-26622" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>nstange</packager>
  <description>This update for the Linux Kernel 5.14.21-150500_11 fixes several issues.

The following security issues were fixed:

- CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644).
- CVE-2024-0775: Fixed use-after-free in __ext4_remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219079).
- CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828).
- CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation (bsc#1219435).
</description>
<summary>Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)</summary>
</patchinfo>