File _patchinfo of Package patchinfo.26797
<patchinfo incident="26797">
<issue id="1202087" tracker="bnc">VUL-0: CVE-2021-33655: kernel live patch: Out of bounds write with ioctl cmd FBIOPUT_VSCREENINFO</issue>
<issue id="1203613" tracker="bnc">VUL-0: CVE-2022-2588: kernel live patch: use-after-free in cls_route</issue>
<issue id="1204170" tracker="bnc">VUL-0: CVE-2022-42703: kernel live patch: mm/rmap.c has a use-after-free related to leaf anon_vma double reuse.</issue>
<issue id="1204381" tracker="bnc">kernel livepatch for: execve() incorrectly handles empty argv array</issue>
<issue id="2021-33655" tracker="cve" />
<issue id="2022-2588" tracker="cve" />
<issue id="2022-42703" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>nstange</packager>
<description>This update for the Linux Kernel 5.3.18-150200_24_112 fixes several issues.
The following security issues were fixed:
- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).
- Fixed incorrect handling of empty arguments array in execve() (bsc#1200571).
</description>
<summary>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP2)</summary>
</patchinfo>