File _patchinfo of Package patchinfo.37618
<patchinfo incident="37618">
<issue id="1227371" tracker="bnc">VUL-0: CVE-2024-36974: kernel live patch: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP</issue>
<issue id="1228585" tracker="bnc">VUL-0: CVE-2024-40956: kernel live patch: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list</issue>
<issue id="1236783" tracker="bnc">VUL-0: CVE-2024-53104: kernel live patch: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format</issue>
<issue id="2024-36974" tracker="cve" />
<issue id="2024-40956" tracker="cve" />
<issue id="2024-53104" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>nstange</packager>
<description>This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues.
The following security issues were fixed:
- CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1228585).
- CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1227371).
- CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).
</description>
<summary>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)</summary>
</patchinfo>