SUSE-SU-2023:0134-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0134-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2023:0134-1
Related
Published
2023-01-25T10:16:28Z
Modified
2025-05-02T04:30:09.161630Z
Upstream
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2022-3435: Fixed an out-of-bounds read in fibnhmatch() of the file net/ipv4/fib_semantics.c (bsc#1204171).
  • CVE-2022-4662: Fixed a recursive locking violation in usb-storage that can cause the kernel to deadlock. (bsc#1206664)
  • CVE-2022-3105: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc_array. (bsc#1206398)
  • CVE-2022-3108: Fixed a bug in kfdparsesubtypeiolink in drivers/gpu/drm/amd/amdkfd/kfdcrat.c where a lack of check of the return value of kmemdup() could lead to a NULL pointer dereference. (bsc#1206389)
  • CVE-2022-3106: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc. (bsc#1206397)
  • CVE-2022-3107: Fixed a null pointer dereference caused by a missing check of the return value of kvmalloc_array. (bsc#1206395)
  • CVE-2022-3111: Fixed a missing release of resource after effective lifetime bug caused by a missing free of the WM8350IRQCHGFASTRDY in wm8350initcharger. (bsc#1206394)
  • CVE-2022-42328: Fixed a bug which could allow guests to trigger denial of service via the netback driver (bsc#1206114).
  • CVE-2022-42329: Fixed a bug which could allow guests to trigger denial of service via the netback driver (bsc#1206113).
  • CVE-2022-3643: Fixed a bug which could allow guests to trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
  • CVE-2019-19083: Fixed a memory leaks in clocksourcecreate that could allow attackers to cause a denial of service (bsc#1157049).

The following non-security bugs were fixed:

  • afs: Fix some tracing details (git-fixes).
  • block: Do not reread partition table on exclusively open device (bsc#1190969).
  • cuse: prevent clone (bsc#1206177).
  • dt-bindings: clocks: imx8mp: Add ID for usb suspend clock (git-fixes).
  • efi: Add iMac Pro 2017 to uefi skip cert quirk (git-fixes).
  • fuse: do not check refcount after stealing page (bsc#1206174).
  • fuse: fix the ->directIO() treatment of ioviter (bsc#1206176).
  • fuse: fix use after free in fusereadinterrupt() (bsc#1206178).
  • fuse: lock inode unconditionally in fuse_fallocate() (bsc#1206179).
  • fuse: update attrversion counter on fusenotifyinvalinode() (bsc#1206175).
  • ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
  • kbuild: Unify options for BTF generation for vmlinux and modules (bsc#1204693).
  • mm, page_alloc: avoid expensive reclaim when compaction may not succeed (bsc#1204250).
  • net: mana: Fix race on per-CQ variable napi work_done (git-fixes).
  • net: usb: cdc_ncm: do not spew notifications (git-fixes).
  • net: usb: qmi_wwan: add u-blox 0x1342 composition (git-fixes).
  • rtc: pcf85063: Fix reading alarm (git-fixes).
  • s390/boot: add secure boot trailer (bsc#1205256 LTC#1205256).
  • tracing: Add tracingresetallonlinecpus_unlocked() function (git-fixes).
  • tracing: Delete all matched events (git-fixes).
  • tracing: Free buffers when a used dynamic event is removed (git-fixes).
  • usb: host: xhci-hub: fix extra endianness conversion (git-fixes).
  • usbnet: move new members to end (git-fixes).
References

Affected packages

SUSE:Real Time Module 15 SP3 / kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-150300.115.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-devel-rt": "5.3.18-150300.115.1",
            "dlm-kmp-rt": "5.3.18-150300.115.1",
            "kernel-rt-devel": "5.3.18-150300.115.1",
            "cluster-md-kmp-rt": "5.3.18-150300.115.1",
            "kernel-rt_debug-devel": "5.3.18-150300.115.1",
            "kernel-source-rt": "5.3.18-150300.115.1",
            "kernel-rt": "5.3.18-150300.115.1",
            "ocfs2-kmp-rt": "5.3.18-150300.115.1",
            "gfs2-kmp-rt": "5.3.18-150300.115.1",
            "kernel-syms-rt": "5.3.18-150300.115.1"
        }
    ]
}

SUSE:Real Time Module 15 SP3 / kernel-rt_debug

Package

Name
kernel-rt_debug
Purl
pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-150300.115.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-devel-rt": "5.3.18-150300.115.1",
            "dlm-kmp-rt": "5.3.18-150300.115.1",
            "kernel-rt-devel": "5.3.18-150300.115.1",
            "cluster-md-kmp-rt": "5.3.18-150300.115.1",
            "kernel-rt_debug-devel": "5.3.18-150300.115.1",
            "kernel-source-rt": "5.3.18-150300.115.1",
            "kernel-rt": "5.3.18-150300.115.1",
            "ocfs2-kmp-rt": "5.3.18-150300.115.1",
            "gfs2-kmp-rt": "5.3.18-150300.115.1",
            "kernel-syms-rt": "5.3.18-150300.115.1"
        }
    ]
}

SUSE:Real Time Module 15 SP3 / kernel-source-rt

Package

Name
kernel-source-rt
Purl
pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-150300.115.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-devel-rt": "5.3.18-150300.115.1",
            "dlm-kmp-rt": "5.3.18-150300.115.1",
            "kernel-rt-devel": "5.3.18-150300.115.1",
            "cluster-md-kmp-rt": "5.3.18-150300.115.1",
            "kernel-rt_debug-devel": "5.3.18-150300.115.1",
            "kernel-source-rt": "5.3.18-150300.115.1",
            "kernel-rt": "5.3.18-150300.115.1",
            "ocfs2-kmp-rt": "5.3.18-150300.115.1",
            "gfs2-kmp-rt": "5.3.18-150300.115.1",
            "kernel-syms-rt": "5.3.18-150300.115.1"
        }
    ]
}

SUSE:Real Time Module 15 SP3 / kernel-syms-rt

Package

Name
kernel-syms-rt
Purl
pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-150300.115.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-devel-rt": "5.3.18-150300.115.1",
            "dlm-kmp-rt": "5.3.18-150300.115.1",
            "kernel-rt-devel": "5.3.18-150300.115.1",
            "cluster-md-kmp-rt": "5.3.18-150300.115.1",
            "kernel-rt_debug-devel": "5.3.18-150300.115.1",
            "kernel-source-rt": "5.3.18-150300.115.1",
            "kernel-rt": "5.3.18-150300.115.1",
            "ocfs2-kmp-rt": "5.3.18-150300.115.1",
            "gfs2-kmp-rt": "5.3.18-150300.115.1",
            "kernel-syms-rt": "5.3.18-150300.115.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.1 / kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-150300.115.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-rt": "5.3.18-150300.115.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.2 / kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-150300.115.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-rt": "5.3.18-150300.115.1"
        }
    ]
}

openSUSE:Leap Micro 5.2 / kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%20Micro%205.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-150300.115.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-rt": "5.3.18-150300.115.1"
        }
    ]
}