Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP3) SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:3061-1 Final 1 1 2022-09-06T14:04:39Z current 2022-09-06T14:04:39Z 2022-09-06T14:04:39Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP3) This update for the Linux Kernel 5.3.18-59_34 fixes several issues. The following security issues were fixed: - CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a victim's TCP session or terminate that session (bsc#1196867). - CVE-2022-36946: Fixed a remote denial of service attack inside nfqnl_mangle in net/netfilter/nfnetlink_queue.c, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative length (bsc#1201941). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-3061,SUSE-SLE-Live-Patching-12-SP4-2022-3033,SUSE-SLE-Live-Patching-12-SP4-2022-3034,SUSE-SLE-Live-Patching-12-SP4-2022-3035,SUSE-SLE-Live-Patching-12-SP4-2022-3036,SUSE-SLE-Live-Patching-12-SP4-2022-3037,SUSE-SLE-Live-Patching-12-SP4-2022-3038,SUSE-SLE-Live-Patching-12-SP4-2022-3039,SUSE-SLE-Live-Patching-12-SP5-2022-3040,SUSE-SLE-Live-Patching-12-SP5-2022-3041,SUSE-SLE-Live-Patching-12-SP5-2022-3042,SUSE-SLE-Live-Patching-12-SP5-2022-3043,SUSE-SLE-Live-Patching-12-SP5-2022-3044,SUSE-SLE-Live-Patching-12-SP5-2022-3045,SUSE-SLE-Live-Patching-12-SP5-2022-3046,SUSE-SLE-Live-Patching-12-SP5-2022-3047,SUSE-SLE-Live-Patching-12-SP5-2022-3048,SUSE-SLE-Live-Patching-12-SP5-2022-3049,SUSE-SLE-Live-Patching-12-SP5-2022-3050,SUSE-SLE-Module-Live-Patching-15-2022-3052,SUSE-SLE-Module-Live-Patching-15-2022-3053,SUSE-SLE-Module-Live-Patching-15-2022-3054,SUSE-SLE-Module-Live-Patching-15-2022-3055,SUSE-SLE-Module-Live-Patching-15-2022-3056,SUSE-SLE-Module-Live-Patching-15-2022-3121,SUSE-SLE-Module-Live-Patching-15-SP1-2022-3058,SUSE-SLE-Module-Live-Patching-15-SP1-2022-3059,SUSE-SLE-Module-Live-Patching-15-SP1-2022-3060,SUSE-SLE-Module-Live-Patching-15-SP1-2022-3061,SUSE-SLE-Module-Live-Patching-15-SP1-2022-3062,SUSE-SLE-Module-Live-Patching-15-SP1-2022-3063,SUSE-SLE-Module-Live-Patching-15-SP2-2022-3065,SUSE-SLE-Module-Live-Patching-15-SP2-2022-3077,SUSE-SLE-Module-Live-Patching-15-SP2-2022-3081,SUSE-SLE-Module-Live-Patching-15-SP2-2022-3082,SUSE-SLE-Module-Live-Patching-15-SP2-2022-3084,SUSE-SLE-Module-Live-Patching-15-SP2-2022-3085,SUSE-SLE-Module-Live-Patching-15-SP2-2022-3090,SUSE-SLE-Module-Live-Patching-15-SP2-2022-3104,SUSE-SLE-Module-Live-Patching-15-SP2-2022-3109,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3066,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3067,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3068,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3069,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3070,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3071,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3073,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3074,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3076,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3078,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3079,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3083,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3110,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3111,SUSE-SLE-Module-Live-Patching-15-SP3-2022-3120 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20223061-1/ Link for SUSE-SU-2022:3061-1 https://lists.suse.com/pipermail/sle-security-updates/2022-September/012117.html E-Mail link for SUSE-SU-2022:3061-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1196867 SUSE Bug 1196867 https://bugzilla.suse.com/1201941 SUSE Bug 1201941 https://www.suse.com/security/cve/CVE-2020-36516/ SUSE CVE CVE-2020-36516 page https://www.suse.com/security/cve/CVE-2022-36946/ SUSE CVE CVE-2022-36946 page SUSE Linux Enterprise Live Patching 12 SP4 SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Live Patching 15 SUSE Linux Enterprise Live Patching 15 SP1 SUSE Linux Enterprise Live Patching 15 SP2 SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-4_12_14-150100_197_111-default-7-150100.2.2 kgraft-patch-4_12_14-95_83-default-13-2.3 kgraft-patch-4_12_14-95_88-default-9-2.3 kgraft-patch-4_12_14-95_93-default-8-2.3 kgraft-patch-4_12_14-95_96-default-7-2.3 kgraft-patch-4_12_14-95_99-default-4-2.2 kgraft-patch-4_12_14-95_102-default-2-2.2 kgraft-patch-4_12_14-95_105-default-2-2.2 kgraft-patch-4_12_14-122_88-default-16-2.3 kgraft-patch-4_12_14-122_91-default-16-2.3 kgraft-patch-4_12_14-122_98-default-14-2.3 kgraft-patch-4_12_14-122_103-default-14-2.3 kgraft-patch-4_12_14-122_106-default-12-2.3 kgraft-patch-4_12_14-122_110-default-10-2.3 kgraft-patch-4_12_14-122_113-default-9-2.3 kgraft-patch-4_12_14-122_116-default-7-2.3 kgraft-patch-4_12_14-122_121-default-5-2.3 kgraft-patch-4_12_14-122_124-default-4-2.2 kgraft-patch-4_12_14-122_127-default-2-2.2 kernel-livepatch-4_12_14-150_78-default-13-150000.2.2 kernel-livepatch-4_12_14-150_83-default-9-150000.2.2 kernel-livepatch-4_12_14-150_86-default-8-150000.2.2 kernel-livepatch-4_12_14-150000_150_89-default-7-150000.2.2 kernel-livepatch-4_12_14-150000_150_92-default-4-150000.2.1 kernel-livepatch-4_12_14-150000_150_95-default-2-150000.2.1 kernel-livepatch-4_12_14-197_102-default-13-150100.2.2 kernel-livepatch-4_12_14-197_105-default-9-150100.2.2 kernel-livepatch-4_12_14-197_108-default-8-150100.2.2 kernel-livepatch-4_12_14-150100_197_114-default-4-150100.2.1 kernel-livepatch-4_12_14-150100_197_117-default-2-150100.2.1 kernel-livepatch-5_3_18-24_86-default-16-150200.2.2 kernel-livepatch-5_3_18-24_99-default-13-150200.2.2 kernel-livepatch-5_3_18-24_93-default-15-150200.2.2 kernel-livepatch-5_3_18-24_102-default-12-150200.2.2 kernel-livepatch-5_3_18-150200_24_112-default-7-150200.2.2 kernel-livepatch-5_3_18-150200_24_115-default-5-150200.2.1 kernel-livepatch-5_3_18-24_96-default-14-150200.2.2 kernel-livepatch-5_3_18-24_107-default-11-150200.2.2 kernel-livepatch-5_3_18-24_83-default-16-150200.2.2 kernel-livepatch-5_3_18-59_27-default-16-150300.2.2 kernel-livepatch-5_3_18-150300_59_49-default-12-150300.2.2 kernel-livepatch-5_3_18-150300_59_60-default-10-150300.2.2 kernel-livepatch-5_3_18-150300_59_68-default-6-150300.2.2 kernel-livepatch-5_3_18-150300_59_76-default-4-150300.2.1 kernel-livepatch-5_3_18-150300_59_46-default-13-150300.2.2 kernel-livepatch-5_3_18-150300_59_43-default-13-150300.2.2 kernel-livepatch-5_3_18-150300_59_87-default-3-150300.2.1 kernel-livepatch-5_3_18-59_24-default-16-150300.2.2 kernel-livepatch-5_3_18-59_37-default-14-150300.2.2 kernel-livepatch-5_3_18-59_40-default-14-150300.2.2 kernel-livepatch-5_3_18-150300_59_54-default-11-150300.2.2 kernel-livepatch-5_3_18-150300_59_63-default-7-150300.2.2 kernel-livepatch-5_3_18-150300_59_71-default-5-150300.2.1 kernel-livepatch-5_3_18-59_34-default-15-150300.2.2 kgraft-patch-4_12_14-95_83-default-13-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kgraft-patch-4_12_14-95_88-default-9-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kgraft-patch-4_12_14-95_93-default-8-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kgraft-patch-4_12_14-95_96-default-7-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kgraft-patch-4_12_14-95_99-default-4-2.2 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kgraft-patch-4_12_14-95_102-default-2-2.2 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kgraft-patch-4_12_14-95_105-default-2-2.2 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kgraft-patch-4_12_14-122_88-default-16-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_91-default-16-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_98-default-14-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_103-default-14-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_106-default-12-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_110-default-10-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_113-default-9-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_116-default-7-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_121-default-5-2.3 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_124-default-4-2.2 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_127-default-2-2.2 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-livepatch-4_12_14-150_78-default-13-150000.2.2 as a component of SUSE Linux Enterprise Live Patching 15 kernel-livepatch-4_12_14-150_83-default-9-150000.2.2 as a component of SUSE Linux Enterprise Live Patching 15 kernel-livepatch-4_12_14-150_86-default-8-150000.2.2 as a component of SUSE Linux Enterprise Live Patching 15 kernel-livepatch-4_12_14-150000_150_89-default-7-150000.2.2 as a component of SUSE Linux Enterprise Live Patching 15 kernel-livepatch-4_12_14-150000_150_92-default-4-150000.2.1 as a component of SUSE Linux Enterprise Live Patching 15 kernel-livepatch-4_12_14-150000_150_95-default-2-150000.2.1 as a component of SUSE Linux Enterprise Live Patching 15 kernel-livepatch-4_12_14-197_102-default-13-150100.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP1 kernel-livepatch-4_12_14-197_105-default-9-150100.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP1 kernel-livepatch-4_12_14-197_108-default-8-150100.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP1 kernel-livepatch-4_12_14-150100_197_111-default-7-150100.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP1 kernel-livepatch-4_12_14-150100_197_114-default-4-150100.2.1 as a component of SUSE Linux Enterprise Live Patching 15 SP1 kernel-livepatch-4_12_14-150100_197_117-default-2-150100.2.1 as a component of SUSE Linux Enterprise Live Patching 15 SP1 kernel-livepatch-5_3_18-24_86-default-16-150200.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-livepatch-5_3_18-24_99-default-13-150200.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-livepatch-5_3_18-24_93-default-15-150200.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-livepatch-5_3_18-24_102-default-12-150200.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-livepatch-5_3_18-150200_24_112-default-7-150200.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-livepatch-5_3_18-150200_24_115-default-5-150200.2.1 as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-livepatch-5_3_18-24_96-default-14-150200.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-livepatch-5_3_18-24_107-default-11-150200.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-livepatch-5_3_18-24_83-default-16-150200.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-livepatch-5_3_18-59_27-default-16-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-150300_59_49-default-12-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-150300_59_60-default-10-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-150300_59_68-default-6-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-150300_59_76-default-4-150300.2.1 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-150300_59_46-default-13-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-150300_59_43-default-13-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-150300_59_87-default-3-150300.2.1 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-59_24-default-16-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-59_37-default-14-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-59_40-default-14-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-150300_59_54-default-11-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-150300_59_63-default-7-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-150300_59_71-default-5-150300.2.1 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-59_34-default-15-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session. CVE-2020-36516 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-2-2.2 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_105-default-2-2.2 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_83-default-13-2.3 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_88-default-9-2.3 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_93-default-8-2.3 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_96-default-7-2.3 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_99-default-4-2.2 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_103-default-14-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-12-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_110-default-10-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_113-default-9-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_116-default-7-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_121-default-5-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_124-default-4-2.2 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_127-default-2-2.2 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_88-default-16-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_91-default-16-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_98-default-14-2.3 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_111-default-7-150100.2.2 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_114-default-4-150100.2.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_117-default-2-150100.2.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-197_102-default-13-150100.2.2 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-197_105-default-9-150100.2.2 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-197_108-default-8-150100.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-150200_24_112-default-7-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-150200_24_115-default-5-150200.2.1 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_102-default-12-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_107-default-11-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_83-default-16-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_86-default-16-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_93-default-15-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_96-default-14-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_99-default-13-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_43-default-13-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_46-default-13-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_49-default-12-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_54-default-11-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_60-default-10-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_63-default-7-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_68-default-6-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_71-default-5-150300.2.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_76-default-4-150300.2.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_87-default-3-150300.2.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_24-default-16-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_27-default-16-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_34-default-15-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_37-default-14-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_40-default-14-150300.2.2 SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150000_150_89-default-7-150000.2.2 SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150000_150_92-default-4-150000.2.1 SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150000_150_95-default-2-150000.2.1 SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_78-default-13-150000.2.2 SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_83-default-9-150000.2.2 SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_86-default-8-150000.2.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223061-1/ https://www.suse.com/security/cve/CVE-2020-36516.html CVE-2020-36516 https://bugzilla.suse.com/1196616 SUSE Bug 1196616 https://bugzilla.suse.com/1196867 SUSE Bug 1196867 https://bugzilla.suse.com/1204092 SUSE Bug 1204092 https://bugzilla.suse.com/1204183 SUSE Bug 1204183 nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len. CVE-2022-36946 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-2-2.2 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_105-default-2-2.2 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_83-default-13-2.3 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_88-default-9-2.3 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_93-default-8-2.3 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_96-default-7-2.3 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_99-default-4-2.2 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_103-default-14-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-12-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_110-default-10-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_113-default-9-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_116-default-7-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_121-default-5-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_124-default-4-2.2 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_127-default-2-2.2 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_88-default-16-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_91-default-16-2.3 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_98-default-14-2.3 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_111-default-7-150100.2.2 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_114-default-4-150100.2.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_117-default-2-150100.2.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-197_102-default-13-150100.2.2 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-197_105-default-9-150100.2.2 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-197_108-default-8-150100.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-150200_24_112-default-7-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-150200_24_115-default-5-150200.2.1 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_102-default-12-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_107-default-11-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_83-default-16-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_86-default-16-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_93-default-15-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_96-default-14-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_99-default-13-150200.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_43-default-13-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_46-default-13-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_49-default-12-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_54-default-11-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_60-default-10-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_63-default-7-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_68-default-6-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_71-default-5-150300.2.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_76-default-4-150300.2.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_87-default-3-150300.2.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_24-default-16-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_27-default-16-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_34-default-15-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_37-default-14-150300.2.2 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_40-default-14-150300.2.2 SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150000_150_89-default-7-150000.2.2 SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150000_150_92-default-4-150000.2.1 SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150000_150_95-default-2-150000.2.1 SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_78-default-13-150000.2.2 SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_83-default-9-150000.2.2 SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-150_86-default-8-150000.2.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223061-1/ https://www.suse.com/security/cve/CVE-2022-36946.html CVE-2022-36946 https://bugzilla.suse.com/1201940 SUSE Bug 1201940 https://bugzilla.suse.com/1201941 SUSE Bug 1201941 https://bugzilla.suse.com/1202312 SUSE Bug 1202312 https://bugzilla.suse.com/1202874 SUSE Bug 1202874 https://bugzilla.suse.com/1203208 SUSE Bug 1203208 https://bugzilla.suse.com/1204132 SUSE Bug 1204132 https://bugzilla.suse.com/1205313 SUSE Bug 1205313 https://bugzilla.suse.com/1212310 SUSE Bug 1212310