SUSE-SU-2022:2237-1
Advisory lineage Upstream: 2 Downstream: 0
Upstream
Published: 01 Jul 2022, 17:35
Last modified:04 Feb 2026, 03:39
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
01 Jul 2022, 17:35
Published
Vulnerability first disclosed
04 Feb 2026, 03:39
Last Modified
Vulnerability information updated
Description
Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP2) This update for the Linux Kernel 5.3.18-150200_24_115 fixes several issues. The following security issues were fixed: - CVE-2022-1116: Fixed an integer overflow vulnerability in io_uring that allows local attacker to cause memory corruption and escalate privileges to root. (bsc#1199647) versions. - CVE-2021-39698: Fixed a possible memory corruption due to a use after free in aio_poll_complete_work. This could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1196956)
Affected Systems
- suse•kernel-livepatch-SLE15-SP2_Update_27&distro=SUSE Linux Enterprise Live Patching 15 SP2
< 2-150200.2.2