SUSE-SU-2022:1575-1
Dashboard / Vulnerabilities / SUSE-SU-2022:1575-1
SUSE-SU-2022:1575-1
Summary: Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP3)
Details: This update for the Linux Kernel 5.3.18-59_37 fixes several issues. The following security issues were fixed: - - CVE-2022-1158: Fixed KVM x86/mmu compare-and-exchange of gPTE via the user address (bsc#1198133) - CVE-2022-0330: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allowed a local user to crash the system or escalate their privileges on the system. (bsc#1195950)
References: https://www.suse.com/support/update/announcement/2022/suse-su-20221575-1/, https://bugzilla.suse.com/1195950, https://bugzilla.suse.com/1198133, https://www.suse.com/security/cve/CVE-2022-0330, https://www.suse.com/security/cve/CVE-2022-1158
Affected packages
Package
Name: kernel-livepatch-SLE15-SP3_Update_10
Purl: pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_10&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3
Affected ranges
Type: ECOSYSTEM
Events:
