Linux Kernel Multiple Vulnerabilities

Last Update Date: 22 Aug 2024 Release Date: 4 Feb 2022 5506 Views

RISK: Medium Risk

TYPE: Operating Systems - Linux

Multiple vulnerabilities were identified in Linux Kernel. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege and sensitive information disclosure on the targeted system.

Note:
CVE-2022-0185 is being exploited in the wild. An unprivileged local user could use this vulnerability to open a filesystem that does not support the Filesystem Context API and perform escalation of privilege on the system. The risk level is rated as Medium Risk.

[Updated on 2024-08-22]

Updated Description.

Impact

Denial of Service
Elevation of Privilege
Information Disclosure

System / Technologies affected

SUSE Linux Enterprise Live Patching 12-SP4
SUSE Linux Enterprise Micro 5.0
SUSE Linux Enterprise Micro 5.1
SUSE Linux Enterprise Module for Live Patching 15-SP2
SUSE Linux Enterprise Module for Live Patching 15-SP3
SUSE Linux Enterprise Module for Realtime 15-SP2
SUSE Linux Enterprise Module for Realtime 15-SP3

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

Linux Kernel Multiple Vulnerabilities

Impact

System / Technologies affected

Solutions

Vulnerability Identifier

Source

Related Link