SUSE-SU-2023:2389-1: kernel-livepatch-SLE15-SP1_Update_35&distro=SUSE Linux Enterprise Live Patching 15 SP1 SUSE Linux Enterprise

Published

Published 06-06-2023Last modified 04-02-2026

Vulnerability summary

SUSE-SU-2023:2389-1 is a vulnerability in kernel-livepatch-SLE15-SP1_Update_35&distro=SUSE Linux Enterprise Live Patching 15 SP1 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 5 · Downstream 0 · Related 5

CVE-2023-1281 CVE-2023-1989 CVE-2023-2162 CVE-2023-23454 CVE-2023-28464

Timeline

06-06-2023
PublishedVulnerability first disclosed.
04-02-2026
Last modifiedVulnerability information updated.

Description

Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1) This update for the Linux Kernel 4.12.14-150100_197_126 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500). - CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209683). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662). - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).