SUSE-SU-2023:2232-1
- Source
- https://www.suse.com/support/update/announcement/2023/suse-su-20232232-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2232-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2023:2232-1
- Related
- Published
- 2023-07-06T01:17:55Z
- Modified
- 2023-07-06T01:17:55Z
- Summary
- Security update for the Linux Kernel
- Details
-
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2023-2483: Fixed a use after free bug in emac_remove due caused by a race condition (bsc#1211037).
- CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498).
- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
- CVE-2020-36691: Fixed a denial of service (unbounded recursion) vulnerability via a nested Netlink policy with a back reference (bsc#1209613 bsc#1209777).
- CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168).
- CVE-2021-3923: Fixed stack information leak vulnerability that could lead to kernel protection bypass in infiniband RDMA (bsc#1209778).
- CVE-2021-4203: Fixed use-after-free read flaw that was found in sockgetsockopt() in net/core/sock.c due to SOPEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535).
- CVE-2022-20567: Fixed use after free that could lead to a local privilege escalation in pppol2tpcreate of l2tpppp.c (bsc#1208850).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845).
- CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599).
- CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777).
- CVE-2023-1118: Fixed a use-after-free bugs caused by enetxirqsim() in media/rc (bsc#1208837).
- CVE-2023-1390: Fixed remote DoS vulnerability in tipclinkxmit() (bsc#1209289).
- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
- CVE-2023-1611: Fixed an use-after-free flaw in btrfssearchslot (bsc#1209687).
- CVE-2023-1855: Fixed an use-after-free flaw in xgenehwmonremove (bsc#1210202).
- CVE-2023-1989: Fixed an use-after-free flaw in btsdio_remove (bsc#1210336).
- CVE-2023-1990: Fixed an use-after-free flaw in ndlc_remove (bsc#1210337).
- CVE-2023-1998: Fixed an use-after-free flaw during login when accessing the shost ipaddress (bsc#1210506).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsiswtcpsessioncreate (bsc#1210647).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036).
- CVE-2023-23455: Fixed a denial of service inside atmtcenqueue in net/sched/schatm.c because of type confusion (non-negative numbers can sometimes indicate a TCACT_SHOT condition rather than valid classification results) (bsc#1207125).
- CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291).
- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hciconncleanup in net/uetooth/hci_conn.c (bsc#1209052).
- CVE-2023-28772: Fixed buffer overflow in seqbufputmemhex in lib/seqbuf.c (bsc#1209549).
- CVE-2023-30772: Fixed race condition and resultant use-after-free in da9150chargerremove (bsc#1210329).
The following non-security bugs were fixed:
- Do not sign the vanilla kernel (bsc#1209008).
- Fix kABI breakage (bsc#1208333)
- PCI: hv: Add a per-bus mutex state_lock (bsc#1207185).
- PCI: hv: Fix a race condition bug in hvpciquery_relations() (bsc#1207185).
- PCI: hv: Fix a race condition in hvirqunmask() that can cause panic (bsc#1207185).
- PCI: hv: Remove the useless hvpcichildstate from struct hvpcidev (bsc#1207185).
- Remove obsolete KMP obsoletes (bsc#1210469).
- Replace mkinitrd dependency with dracut (bsc#1202353).
- cifs: fix double free in dfs mounts (bsc#1209845).
- cifs: fix negotiate context parsing (bsc#1210301).
- cifs: handle reconnect of tcon when there is no cached dfs referral (bsc#1209845).
- cifs: missing null pointer check in cifs_mount (bsc#1209845).
- cifs: serialize all mount attempts (bsc#1209845).
- cred: allow getcred() and putcred() to be given NULL (bsc#1209887).
- ipv6: raw: Deduct extension header length in rawv6pushpending_frames (bsc#1207168).
- k-m-s: Drop Linux 2.6 support
- kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179).
- References
-
- https://www.suse.com/support/update/announcement/2023/suse-su-20232232-1/
- https://bugzilla.suse.com/1076830
- https://bugzilla.suse.com/1194535
- https://bugzilla.suse.com/1202353
- https://bugzilla.suse.com/1205128
- https://bugzilla.suse.com/1207036
- https://bugzilla.suse.com/1207125
- https://bugzilla.suse.com/1207168
- https://bugzilla.suse.com/1207185
- https://bugzilla.suse.com/1207795
- https://bugzilla.suse.com/1207845
- https://bugzilla.suse.com/1208179
- https://bugzilla.suse.com/1208333
- https://bugzilla.suse.com/1208599
- https://bugzilla.suse.com/1208777
- https://bugzilla.suse.com/1208837
- https://bugzilla.suse.com/1208850
- https://bugzilla.suse.com/1209008
- https://bugzilla.suse.com/1209052
- https://bugzilla.suse.com/1209256
- https://bugzilla.suse.com/1209289
- https://bugzilla.suse.com/1209291
- https://bugzilla.suse.com/1209532
- https://bugzilla.suse.com/1209547
- https://bugzilla.suse.com/1209549
- https://bugzilla.suse.com/1209613
- https://bugzilla.suse.com/1209687
- https://bugzilla.suse.com/1209777
- https://bugzilla.suse.com/1209778
- https://bugzilla.suse.com/1209845
- https://bugzilla.suse.com/1209871
- https://bugzilla.suse.com/1209887
- https://bugzilla.suse.com/1210124
- https://bugzilla.suse.com/1210202
- https://bugzilla.suse.com/1210301
- https://bugzilla.suse.com/1210329
- https://bugzilla.suse.com/1210336
- https://bugzilla.suse.com/1210337
- https://bugzilla.suse.com/1210469
- https://bugzilla.suse.com/1210498
- https://bugzilla.suse.com/1210506
- https://bugzilla.suse.com/1210647
- https://bugzilla.suse.com/1211037
- https://www.suse.com/security/cve/CVE-2017-5753
- https://www.suse.com/security/cve/CVE-2020-36691
- https://www.suse.com/security/cve/CVE-2021-3923
- https://www.suse.com/security/cve/CVE-2021-4203
- https://www.suse.com/security/cve/CVE-2022-20567
- https://www.suse.com/security/cve/CVE-2022-43945
- https://www.suse.com/security/cve/CVE-2023-0394
- https://www.suse.com/security/cve/CVE-2023-0590
- https://www.suse.com/security/cve/CVE-2023-0597
- https://www.suse.com/security/cve/CVE-2023-1076
- https://www.suse.com/security/cve/CVE-2023-1095
- https://www.suse.com/security/cve/CVE-2023-1118
- https://www.suse.com/security/cve/CVE-2023-1390
- https://www.suse.com/security/cve/CVE-2023-1513
- https://www.suse.com/security/cve/CVE-2023-1611
- https://www.suse.com/security/cve/CVE-2023-1670
- https://www.suse.com/security/cve/CVE-2023-1855
- https://www.suse.com/security/cve/CVE-2023-1989
- https://www.suse.com/security/cve/CVE-2023-1990
- https://www.suse.com/security/cve/CVE-2023-1998
- https://www.suse.com/security/cve/CVE-2023-2124
- https://www.suse.com/security/cve/CVE-2023-2162
- https://www.suse.com/security/cve/CVE-2023-23454
- https://www.suse.com/security/cve/CVE-2023-23455
- https://www.suse.com/security/cve/CVE-2023-2483
- https://www.suse.com/security/cve/CVE-2023-28328
- https://www.suse.com/security/cve/CVE-2023-28464
- https://www.suse.com/security/cve/CVE-2023-28772
- https://www.suse.com/security/cve/CVE-2023-30772
Affected packages
SUSE:OpenStack Cloud 9 / kernel-default
Package
- Name
- kernel-default
- Purl
- pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%209
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"kernel-macros": "4.12.14-95.125.1",
"kernel-devel": "4.12.14-95.125.1",
"kernel-default-base": "4.12.14-95.125.1",
"kernel-default": "4.12.14-95.125.1",
"kernel-source": "4.12.14-95.125.1",
"kernel-syms": "4.12.14-95.125.1",
"kernel-default-devel": "4.12.14-95.125.1"
}
]
}
SUSE:OpenStack Cloud 9 / kernel-source
Package
- Name
- kernel-source
- Purl
- pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%209
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"kernel-macros": "4.12.14-95.125.1",
"kernel-devel": "4.12.14-95.125.1",
"kernel-default-base": "4.12.14-95.125.1",
"kernel-default": "4.12.14-95.125.1",
"kernel-source": "4.12.14-95.125.1",
"kernel-syms": "4.12.14-95.125.1",
"kernel-default-devel": "4.12.14-95.125.1"
}
]
}
SUSE:OpenStack Cloud 9 / kernel-syms
Package
- Name
- kernel-syms
- Purl
- pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%209
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"kernel-macros": "4.12.14-95.125.1",
"kernel-devel": "4.12.14-95.125.1",
"kernel-default-base": "4.12.14-95.125.1",
"kernel-default": "4.12.14-95.125.1",
"kernel-source": "4.12.14-95.125.1",
"kernel-syms": "4.12.14-95.125.1",
"kernel-default-devel": "4.12.14-95.125.1"
}
]
}
SUSE:OpenStack Cloud Crowbar 9 / kernel-default
Package
- Name
- kernel-default
- Purl
- pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"kernel-macros": "4.12.14-95.125.1",
"kernel-devel": "4.12.14-95.125.1",
"kernel-default-base": "4.12.14-95.125.1",
"kernel-default": "4.12.14-95.125.1",
"kernel-source": "4.12.14-95.125.1",
"kernel-syms": "4.12.14-95.125.1",
"kernel-default-devel": "4.12.14-95.125.1"
}
]
}
SUSE:OpenStack Cloud Crowbar 9 / kernel-source
Package
- Name
- kernel-source
- Purl
- pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"kernel-macros": "4.12.14-95.125.1",
"kernel-devel": "4.12.14-95.125.1",
"kernel-default-base": "4.12.14-95.125.1",
"kernel-default": "4.12.14-95.125.1",
"kernel-source": "4.12.14-95.125.1",
"kernel-syms": "4.12.14-95.125.1",
"kernel-default-devel": "4.12.14-95.125.1"
}
]
}
SUSE:OpenStack Cloud Crowbar 9 / kernel-syms
Package
- Name
- kernel-syms
- Purl
- pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"kernel-macros": "4.12.14-95.125.1",
"kernel-devel": "4.12.14-95.125.1",
"kernel-default-base": "4.12.14-95.125.1",
"kernel-default": "4.12.14-95.125.1",
"kernel-source": "4.12.14-95.125.1",
"kernel-syms": "4.12.14-95.125.1",
"kernel-default-devel": "4.12.14-95.125.1"
}
]
}
SUSE:Linux Enterprise High Availability Extension 12 SP4 / drbd
Package
- Name
- drbd
- Purl
- pkg:rpm/suse/drbd&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed9.0.14+git.62f906cf-4.26.2
Ecosystem specific
{
"binaries": [
{
"dlm-kmp-default": "4.12.14-95.125.1",
"gfs2-kmp-default": "4.12.14-95.125.1",
"drbd": "9.0.14+git.62f906cf-4.26.2",
"ocfs2-kmp-default": "4.12.14-95.125.1",
"cluster-md-kmp-default": "4.12.14-95.125.1",
"drbd-kmp-default": "9.0.14+git.62f906cf_k4.12.14_95.125-4.26.2"
}
]
}
SUSE:Linux Enterprise High Availability Extension 12 SP4 / kernel-default
Package
- Name
- kernel-default
- Purl
- pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"dlm-kmp-default": "4.12.14-95.125.1",
"gfs2-kmp-default": "4.12.14-95.125.1",
"drbd": "9.0.14+git.62f906cf-4.26.2",
"ocfs2-kmp-default": "4.12.14-95.125.1",
"cluster-md-kmp-default": "4.12.14-95.125.1",
"drbd-kmp-default": "9.0.14+git.62f906cf_k4.12.14_95.125-4.26.2"
}
]
}
SUSE:Linux Enterprise Live Patching 12 SP4 / kernel-default
Package
- Name
- kernel-default
- Purl
- pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4
SUSE:Linux Enterprise Live Patching 12 SP4 / kgraft-patch-SLE12-SP4_Update_35
Package
- Name
- kgraft-patch-SLE12-SP4_Update_35
- Purl
- pkg:rpm/suse/kgraft-patch-SLE12-SP4_Update_35&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4
SUSE:Linux Enterprise Server 12 SP4-ESPOS / kernel-default
Package
- Name
- kernel-default
- Purl
- pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-ESPOS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"kernel-macros": "4.12.14-95.125.1",
"kernel-devel": "4.12.14-95.125.1",
"kernel-default-base": "4.12.14-95.125.1",
"kernel-default": "4.12.14-95.125.1",
"kernel-source": "4.12.14-95.125.1",
"kernel-syms": "4.12.14-95.125.1",
"kernel-default-devel": "4.12.14-95.125.1"
}
]
}
SUSE:Linux Enterprise Server 12 SP4-ESPOS / kernel-source
Package
- Name
- kernel-source
- Purl
- pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-ESPOS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"kernel-macros": "4.12.14-95.125.1",
"kernel-devel": "4.12.14-95.125.1",
"kernel-default-base": "4.12.14-95.125.1",
"kernel-default": "4.12.14-95.125.1",
"kernel-source": "4.12.14-95.125.1",
"kernel-syms": "4.12.14-95.125.1",
"kernel-default-devel": "4.12.14-95.125.1"
}
]
}
SUSE:Linux Enterprise Server 12 SP4-ESPOS / kernel-syms
Package
- Name
- kernel-syms
- Purl
- pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-ESPOS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"kernel-macros": "4.12.14-95.125.1",
"kernel-devel": "4.12.14-95.125.1",
"kernel-default-base": "4.12.14-95.125.1",
"kernel-default": "4.12.14-95.125.1",
"kernel-source": "4.12.14-95.125.1",
"kernel-syms": "4.12.14-95.125.1",
"kernel-default-devel": "4.12.14-95.125.1"
}
]
}
SUSE:Linux Enterprise Server 12 SP4-LTSS / kernel-default
Package
- Name
- kernel-default
- Purl
- pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"kernel-macros": "4.12.14-95.125.1",
"kernel-devel": "4.12.14-95.125.1",
"kernel-default-base": "4.12.14-95.125.1",
"kernel-default-man": "4.12.14-95.125.1",
"kernel-default": "4.12.14-95.125.1",
"kernel-source": "4.12.14-95.125.1",
"kernel-syms": "4.12.14-95.125.1",
"kernel-default-devel": "4.12.14-95.125.1"
}
]
}
SUSE:Linux Enterprise Server 12 SP4-LTSS / kernel-source
Package
- Name
- kernel-source
- Purl
- pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"kernel-macros": "4.12.14-95.125.1",
"kernel-devel": "4.12.14-95.125.1",
"kernel-default-base": "4.12.14-95.125.1",
"kernel-default-man": "4.12.14-95.125.1",
"kernel-default": "4.12.14-95.125.1",
"kernel-source": "4.12.14-95.125.1",
"kernel-syms": "4.12.14-95.125.1",
"kernel-default-devel": "4.12.14-95.125.1"
}
]
}
SUSE:Linux Enterprise Server 12 SP4-LTSS / kernel-syms
Package
- Name
- kernel-syms
- Purl
- pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-95.125.1
Ecosystem specific
{
"binaries": [
{
"kernel-macros": "4.12.14-95.125.1",
"kernel-devel": "4.12.14-95.125.1",
"kernel-default-base": "4.12.14-95.125.1",
"kernel-default-man": "4.12.14-95.125.1",
"kernel-default": "4.12.14-95.125.1",
"kernel-source": "4.12.14-95.125.1",
"kernel-syms": "4.12.14-95.125.1",
"kernel-default-devel": "4.12.14-95.125.1"
}
]
}