SUSE-SU-2024:0120-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2024/suse-su-20240120-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0120-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:0120-1

Related

Published

2024-01-16T12:32:54Z

Modified

2024-01-16T12:32:54Z

Summary

Security update for the Linux Kernel

Details

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN (bsc#1179610 bsc#1215237).
CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bsc#1202095).
CVE-2023-51779: Fixed a use-after-free because of a btsockioctl race condition in btsockrecvmsg (bsc#1218559).
CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250).
CVE-2023-6606: Fixed an out-of-bounds read vulnerability in smbCalcSize in fs/smb/client/netmisc.c that could allow a local attacker to crash the system or leak internal kernel information (bsc#1217947).
CVE-2023-6610: Fixed an out-of-bounds read vulnerability in smb2dumpdetail in fs/smb/client/smb2ops.c that could allow a local attacker to crash the system or leak internal kernel information (bsc#1217946).
CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258).
CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253).

The following non-security bugs were fixed:

doc/README.SUSE: Add how to update the config for module signing (jsc#PED-5021)
doc/README.SUSE: Remove how to build modules using kernel-source (jsc#PED-5021)
doc/README.SUSE: Simplify the list of references (jsc#PED-5021)

References

Affected packages

SUSE:Linux Enterprise Live Patching 15 SP1 / kernel-default

Package

Name: kernel-default
Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-livepatch": "4.12.14-150100.197.168.1",
            "kernel-default-livepatch-devel": "4.12.14-150100.197.168.1",
            "kernel-livepatch-4_12_14-150100_197_168-default": "1-150100.3.3.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 SP1 / kernel-livepatch-SLE15-SP1_Update_47

Package

Name: kernel-livepatch-SLE15-SP1_Update_47
Purl: pkg:rpm/suse/kernel-livepatch-SLE15-SP1_Update_47&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1-150100.3.3.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-livepatch": "4.12.14-150100.197.168.1",
            "kernel-default-livepatch-devel": "4.12.14-150100.197.168.1",
            "kernel-livepatch-4_12_14-150100_197_168-default": "1-150100.3.3.1"
        }
    ]
}

SUSE:Linux Enterprise High Availability Extension 15 SP1 / kernel-default

Package

Name: kernel-default
Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "dlm-kmp-default": "4.12.14-150100.197.168.1",
            "gfs2-kmp-default": "4.12.14-150100.197.168.1",
            "ocfs2-kmp-default": "4.12.14-150100.197.168.1",
            "cluster-md-kmp-default": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS / kernel-default

Package

Name: kernel-default
Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS / kernel-docs

Package

Name: kernel-docs
Purl: pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS / kernel-obs-build

Package

Name: kernel-obs-build
Purl: pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS / kernel-source

Package

Name: kernel-source
Purl: pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS / kernel-syms

Package

Name: kernel-syms
Purl: pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP1-LTSS / kernel-default

Package

Name: kernel-default
Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1",
            "kernel-default-man": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "reiserfs-kmp-default": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP1-LTSS / kernel-docs

Package

Name: kernel-docs
Purl: pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1",
            "kernel-default-man": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "reiserfs-kmp-default": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP1-LTSS / kernel-obs-build

Package

Name: kernel-obs-build
Purl: pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1",
            "kernel-default-man": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "reiserfs-kmp-default": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP1-LTSS / kernel-source

Package

Name: kernel-source
Purl: pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1",
            "kernel-default-man": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "reiserfs-kmp-default": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP1-LTSS / kernel-syms

Package

Name: kernel-syms
Purl: pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1",
            "kernel-default-man": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "reiserfs-kmp-default": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP1-LTSS / kernel-zfcpdump

Package

Name: kernel-zfcpdump
Purl: pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1",
            "kernel-default-man": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "reiserfs-kmp-default": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP1 / kernel-default

Package

Name: kernel-default
Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "reiserfs-kmp-default": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP1 / kernel-docs

Package

Name: kernel-docs
Purl: pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "reiserfs-kmp-default": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP1 / kernel-obs-build

Package

Name: kernel-obs-build
Purl: pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "reiserfs-kmp-default": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP1 / kernel-source

Package

Name: kernel-source
Purl: pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "reiserfs-kmp-default": "4.12.14-150100.197.168.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP1 / kernel-syms

Package

Name: kernel-syms
Purl: pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-150100.197.168.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-150100.197.168.1",
            "kernel-devel": "4.12.14-150100.197.168.1",
            "kernel-default-base": "4.12.14-150100.197.168.1",
            "kernel-docs": "4.12.14-150100.197.168.1",
            "kernel-default": "4.12.14-150100.197.168.1",
            "kernel-obs-build": "4.12.14-150100.197.168.1",
            "kernel-source": "4.12.14-150100.197.168.1",
            "kernel-syms": "4.12.14-150100.197.168.1",
            "kernel-default-devel": "4.12.14-150100.197.168.1",
            "reiserfs-kmp-default": "4.12.14-150100.197.168.1"
        }
    ]
}