SUSE-SU-2023:0134-1

Advisory lineage Upstream: 11 Downstream: 0
Published: 25 Jan 2023, 10:16
Last modified:04 Feb 2026, 02:54

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

25 Jan 2023, 10:16
Published
Vulnerability first disclosed
04 Feb 2026, 02:54
Last Modified
Vulnerability information updated

Description

Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3435: Fixed an out-of-bounds read in fib_nh_match() of the file net/ipv4/fib_semantics.c (bsc#1204171). - CVE-2022-4662: Fixed a recursive locking violation in usb-storage that can cause the kernel to deadlock. (bsc#1206664) - CVE-2022-3105: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc_array. (bsc#1206398) - CVE-2022-3108: Fixed a bug in kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c where a lack of check of the return value of kmemdup() could lead to a NULL pointer dereference. (bsc#1206389) - CVE-2022-3106: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc. (bsc#1206397) - CVE-2022-3107: Fixed a null pointer dereference caused by a missing check of the return value of kvmalloc_array. (bsc#1206395) - CVE-2022-3111: Fixed a missing release of resource after effective lifetime bug caused by a missing free of the WM8350_IRQ_CHG_FAST_RDY in wm8350_init_charger. (bsc#1206394) - CVE-2022-42328: Fixed a bug which could allow guests to trigger denial of service via the netback driver (bsc#1206114). - CVE-2022-42329: Fixed a bug which could allow guests to trigger denial of service via the netback driver (bsc#1206113). - CVE-2022-3643: Fixed a bug which could allow guests to trigger NIC interface reset/abort/crash via netback driver (bsc#1206113). - CVE-2019-19083: Fixed a memory leaks in clock_source_create that could allow attackers to cause a denial of service (bsc#1157049). The following non-security bugs were fixed: - afs: Fix some tracing details (git-fixes). - block: Do not reread partition table on exclusively open device (bsc#1190969). - cuse: prevent clone (bsc#1206177). - dt-bindings: clocks: imx8mp: Add ID for usb suspend clock (git-fixes). - efi: Add iMac Pro 2017 to uefi skip cert quirk (git-fixes). - fuse: do not check refcount after stealing page (bsc#1206174). - fuse: fix the ->direct_IO() treatment of iov_iter (bsc#1206176). - fuse: fix use after free in fuse_read_interrupt() (bsc#1206178). - fuse: lock inode unconditionally in fuse_fallocate() (bsc#1206179). - fuse: update attr_version counter on fuse_notify_inval_inode() (bsc#1206175). - ipv6: ping: fix wrong checksum for large frames (bsc#1203183). - kbuild: Unify options for BTF generation for vmlinux and modules (bsc#1204693). - mm, page_alloc: avoid expensive reclaim when compaction may not succeed (bsc#1204250). - net: mana: Fix race on per-CQ variable napi work_done (git-fixes). - net: usb: cdc_ncm: do not spew notifications (git-fixes). - net: usb: qmi_wwan: add u-blox 0x1342 composition (git-fixes). - rtc: pcf85063: Fix reading alarm (git-fixes). - s390/boot: add secure boot trailer (bsc#1205256 LTC#1205256). - tracing: Add tracing_reset_all_online_cpus_unlocked() function (git-fixes). - tracing: Delete all matched events (git-fixes). - tracing: Free buffers when a used dynamic event is removed (git-fixes). - usb: host: xhci-hub: fix extra endianness conversion (git-fixes). - usbnet: move new members to end (git-fixes).

Affected Systems

  • opensuse•kernel-rt&distro=openSUSE Leap Micro 5.2

    < 5.3.18-150300.115.1

  • suse•kernel-rt_debug&distro=SUSE Real Time Module 15 SP3

    < 5.3.18-150300.115.1

  • suse•kernel-rt&distro=SUSE Linux Enterprise Micro 5.1

    < 5.3.18-150300.115.1

  • suse•kernel-rt&distro=SUSE Linux Enterprise Micro 5.2

    < 5.3.18-150300.115.1

  • suse•kernel-rt&distro=SUSE Real Time Module 15 SP3

    < 5.3.18-150300.115.1

  • suse•kernel-source-rt&distro=SUSE Real Time Module 15 SP3

    < 5.3.18-150300.115.1

  • suse•kernel-syms-rt&distro=SUSE Real Time Module 15 SP3

    < 5.3.18-150300.115.1

References (34)