SUSE-SU-2023:2448-1: kernel-livepatch-SLE15-SP2_Update_32&distro=SUSE Linux Enterprise Live Patching 15 SP2 SUSE Linux Enterprise

Published

Published 07-06-2023Last modified 04-02-2026

Vulnerability summary

SUSE-SU-2023:2448-1 is a vulnerability in kernel-livepatch-SLE15-SP2_Update_32&distro=SUSE Linux Enterprise Live Patching 15 SP2 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 7 · Downstream 0 · Related 7

CVE-2023-0461 CVE-2023-1281 CVE-2023-1872 CVE-2023-1989 CVE-2023-2162 CVE-2023-23454+1 more

Timeline

07-06-2023
PublishedVulnerability first disclosed.
04-02-2026
Last modifiedVulnerability information updated.

Description

Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP2) This update for the Linux Kernel 5.3.18-150200_24_139 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500). - CVE-2023-1872: Fixed a use after free vulnerability in the io_uring subsystem, which could lead to local privilege escalation (bsc#1210417). - CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209683). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662). - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208911). - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).