File _patchinfo of Package patchinfo.28443
<patchinfo incident="28443">
<issue id="1208838" tracker="bnc">VUL-0: CVE-2023-1078: kernel live patch: heap out-of-bounds write in rds_rm_zerocopy_callback</issue>
<issue id="1208909" tracker="bnc">VUL-0: CVE-2023-26545: kernel live patch: double free in net/mpls/af_mpls.c upon an allocation failure</issue>
<issue id="2023-1078" tracker="cve" />
<issue id="2023-26545" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>nstange</packager>
<description>This update for the Linux Kernel 5.14.21-150400_24_46 fixes several issues.
The following security issues were fixed:
- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700).
- CVE-2023-1078: Fixed a heap out-of-bounds write in rds_rm_zerocopy_callback (bsc#1208838).
</description>
<summary>Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP4)</summary>
</patchinfo>