SUSE-SU-2024:0117-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2024/suse-su-20240117-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0117-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:0117-1

Related

Published

2024-01-16T12:31:25Z

Modified

2024-01-16T12:31:25Z

Summary

Security update for the Linux Kernel

Details

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bsc#1202095).
CVE-2023-6121: Fixed an information leak via dmesg when receiving a crafted packet in the NVMe-oF/TCP subsystem (bsc#1217250).
CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947).
CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946).
CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1214158 bsc#1218258).
CVE-2023-6932: Fixed a use-after-free issue when receiving an IGMP query packet due to reference count mismanagement (bsc#1218253).
CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks (bsc#1179610 bsc#1215237).
CVE-2023-51779: Fixed a use-after-free issue due to a race condition during Bluetooth message reception (bsc#1218559).

The following non-security bugs were fixed:

Enabled the LLC counters for “perf” (perf stat) on the Ice-Lake and Rocket-Lake CPUs (jsc#PED-5023 bsc#1211439).
Reviewed and added more information to README.SUSE (jsc#PED-5021).
Enabled multibuild for kernel packages (JSC-SLE#5501, boo#1211226, bsc#1218184).
Fix termination state for idrforeachentryul() (bsc#1109837).
KVM: s390/mm: Properly reset no-dat (bsc#1218057).
KVM: s390: vsie: fix wrong VIR 37 when MSO is used (bsc#1217936).
PCI: Disable ATS for specific Intel IPU E2000 devices (bsc#1218622).
gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479).
gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479).
gve: Changes to add new TX queues (bsc#1214479).
gve: Control path for DQO-QPL (bsc#1214479).
gve: Do not fully free QPL pages on prefill errors (bsc#1214479).
gve: Fix gve interrupt names (bsc#1214479).
gve: Fixes for napi_poll when budget is 0 (bsc#1214479).
gve: RX path for DQO-QPL (bsc#1214479).
gve: Set default duplex configuration to full (bsc#1214479).
gve: Tx path for DQO-QPL (bsc#1214479).
gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479).
gve: XDP support GQI-QPL: helper function changes (bsc#1214479).
gve: fix frag_list chaining (bsc#1214479).
gve: trivial spell fix Recive to Receive (bsc#1214479).
gve: unify driver name usage (bsc#1214479).
net/tg3: fix race condition in tg3resettask() (bsc#1217801).
net/tg3: resolve deadlock in tg3resettask() during EEH (bsc#1217801).
s390/vx: fix save/restore of fpu kernel context (bsc#1218362).
tracing: Fix a possible race when disabling buffered events (bsc#1217036).
tracing: Fix a warning when allocating buffered events fails (bsc#1217036).
tracing: Fix incomplete locking when disabling buffered events (bsc#1217036).
tracing: Fix warning in tracebufferedevent_disable() (bsc#1217036).

References

Affected packages

SUSE:Linux Enterprise High Availability Extension 12 SP5 / kernel-default

Package

Name: kernel-default
Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.189.1

Ecosystem specific

{
    "binaries": [
        {
            "dlm-kmp-default": "4.12.14-122.189.1",
            "gfs2-kmp-default": "4.12.14-122.189.1",
            "ocfs2-kmp-default": "4.12.14-122.189.1",
            "cluster-md-kmp-default": "4.12.14-122.189.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP5 / kernel-default

Package

Name: kernel-default
Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.189.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-kgraft": "4.12.14-122.189.1",
            "kernel-default-kgraft-devel": "4.12.14-122.189.1",
            "kgraft-patch-4_12_14-122_189-default": "1-8.3.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP5 / kgraft-patch-SLE12-SP5_Update_52

Package

Name: kgraft-patch-SLE12-SP5_Update_52
Purl: pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_52&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1-8.3.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-kgraft": "4.12.14-122.189.1",
            "kernel-default-kgraft-devel": "4.12.14-122.189.1",
            "kgraft-patch-4_12_14-122_189-default": "1-8.3.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP5 / kernel-docs

Package

Name: kernel-docs
Purl: pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.189.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "4.12.14-122.189.1",
            "kernel-obs-build": "4.12.14-122.189.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP5 / kernel-obs-build

Package

Name: kernel-obs-build
Purl: pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.189.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "4.12.14-122.189.1",
            "kernel-obs-build": "4.12.14-122.189.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP5 / kernel-default

Package

Name: kernel-default
Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.189.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.189.1",
            "kernel-devel": "4.12.14-122.189.1",
            "kernel-default-base": "4.12.14-122.189.1",
            "kernel-default-man": "4.12.14-122.189.1",
            "kernel-default": "4.12.14-122.189.1",
            "kernel-source": "4.12.14-122.189.1",
            "kernel-syms": "4.12.14-122.189.1",
            "kernel-default-devel": "4.12.14-122.189.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP5 / kernel-source

Package

Name: kernel-source
Purl: pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.189.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.189.1",
            "kernel-devel": "4.12.14-122.189.1",
            "kernel-default-base": "4.12.14-122.189.1",
            "kernel-default-man": "4.12.14-122.189.1",
            "kernel-default": "4.12.14-122.189.1",
            "kernel-source": "4.12.14-122.189.1",
            "kernel-syms": "4.12.14-122.189.1",
            "kernel-default-devel": "4.12.14-122.189.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP5 / kernel-syms

Package

Name: kernel-syms
Purl: pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.189.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.189.1",
            "kernel-devel": "4.12.14-122.189.1",
            "kernel-default-base": "4.12.14-122.189.1",
            "kernel-default-man": "4.12.14-122.189.1",
            "kernel-default": "4.12.14-122.189.1",
            "kernel-source": "4.12.14-122.189.1",
            "kernel-syms": "4.12.14-122.189.1",
            "kernel-default-devel": "4.12.14-122.189.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP5 / kernel-default

Package

Name: kernel-default
Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.189.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.189.1",
            "kernel-devel": "4.12.14-122.189.1",
            "kernel-default-base": "4.12.14-122.189.1",
            "kernel-default-man": "4.12.14-122.189.1",
            "kernel-default": "4.12.14-122.189.1",
            "kernel-source": "4.12.14-122.189.1",
            "kernel-syms": "4.12.14-122.189.1",
            "kernel-default-devel": "4.12.14-122.189.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP5 / kernel-source

Package

Name: kernel-source
Purl: pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.189.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.189.1",
            "kernel-devel": "4.12.14-122.189.1",
            "kernel-default-base": "4.12.14-122.189.1",
            "kernel-default-man": "4.12.14-122.189.1",
            "kernel-default": "4.12.14-122.189.1",
            "kernel-source": "4.12.14-122.189.1",
            "kernel-syms": "4.12.14-122.189.1",
            "kernel-default-devel": "4.12.14-122.189.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP5 / kernel-syms

Package

Name: kernel-syms
Purl: pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.189.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.189.1",
            "kernel-devel": "4.12.14-122.189.1",
            "kernel-default-base": "4.12.14-122.189.1",
            "kernel-default-man": "4.12.14-122.189.1",
            "kernel-default": "4.12.14-122.189.1",
            "kernel-source": "4.12.14-122.189.1",
            "kernel-syms": "4.12.14-122.189.1",
            "kernel-default-devel": "4.12.14-122.189.1"
        }
    ]
}

SUSE:Linux Enterprise Workstation Extension 12 SP5 / kernel-default

Package

Name: kernel-default
Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.189.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-extra": "4.12.14-122.189.1"
        }
    ]
}