Configuration in oracleasm-kmp-rt - #VU74205
Published: March 30, 2023
Vulnerability identifier: #VU74205
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-16
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The issue may allow a local user to bypass implemented security restrictions.
The issue exists due to the possibility to bypass implemented security restrictions, related to secure boot. it was addressed by rebuilding the package with the new secure boot key.
Affected software
oracleasm-kmp-rt
oracleasm-kmp-rt-debuginfo
SUSE Linux Enterprise Real Time 15
SUSE Real Time Module
openSUSE Leap
oracleasm-kmp-rt-debuginfo
SUSE Linux Enterprise Real Time 15
SUSE Real Time Module
openSUSE Leap
Remediation
Install updates from vendor's website.
oracleasm-kmp-rt - update to 2.0.8_k5.14.21_150400.15.14-150400.4.2.2
oracleasm-kmp-rt-debuginfo - update to 2.0.8_k5.14.21_150400.15.14-150400.4.2.2
oracleasm-kmp-rt-debuginfo - update to 2.0.8_k5.14.21_150400.15.14-150400.4.2.2