[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-SUSE-SU-2023:1848-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":46,"duplicates":47,"related":48,"reserved_at":9,"published_at":65,"modified_at":66,"state":9,"summary":67,"references_raw":69,"kevs":239,"epss":9,"epss_history":240,"metrics":241,"affected":242},"SUSE-SU-2023:1848-1","Security update for the Linux Kernel\n\n\nThe SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).\n- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).\n- CVE-2021-3923: Fixed stack information leak vulnerability that could lead to kernel protection bypass in infiniband RDMA (bsc#1209778).\n- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535).\n- CVE-2022-20567: Fixed use after free that could lead to a local privilege escalation in pppol2tp_create of l2tp_ppp.c (bsc#1208850).\n- CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168).\n- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).\n- CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599).\n- CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777).\n- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).\n- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1209289).\n- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).\n- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036).\n- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207125).\n- CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291).\n- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).\n- CVE-2023-28772: Fixed buffer overflow in seq_buf_putmem_hex in lib/seq_buf.c (bsc#1209549).\n\nThe following non-security bugs were fixed:\n\n- Do not sign the vanilla kernel (bsc#1209008).\n- PCI: hv: Add a per-bus mutex state_lock (bsc#1208811).\n- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1208811).\n- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1208811).\n- PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1208811).\n- Revert 'PCI: hv: Fix a timing issue which causes kdump to fail occasionally' (bsc#1208811).\n- cifs: fix double free in dfs mounts (bsc#1209845).\n- cifs: fix nodfs mount option (bsc#1209845).\n- cifs: handle reconnect of tcon when there is no cached dfs referral (bsc#1209845).\n- cifs: missing null pointer check in cifs_mount (bsc#1209845).\n- cifs: serialize all mount attempts (bsc#1209845).\n- cred: allow get_cred() and put_cred() to be given NULL (bsc#1209887).\n- ibmvnic: Process crqs after enabling interrupts (bsc#1192273 ltc#194629).\n- ibmvnic: do not stop queue in xmit (bsc#1192273 ltc#194629).\n- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (bsc#1207168).\n- kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179).\n",null,[],[],[],[14,16,18,20,22,24,26,28,30,32,34,36,38,40,42,44],{"_key":15},"CVE-2017-5753",{"_key":17},"CVE-2021-3923",{"_key":19},"CVE-2021-4203",{"_key":21},"CVE-2022-20567",{"_key":23},"CVE-2023-0394",{"_key":25},"CVE-2023-0590",{"_key":27},"CVE-2023-1076",{"_key":29},"CVE-2023-1095",{"_key":31},"CVE-2023-1281",{"_key":33},"CVE-2023-1390",{"_key":35},"CVE-2023-1513",{"_key":37},"CVE-2023-23454",{"_key":39},"CVE-2023-23455",{"_key":41},"CVE-2023-28328",{"_key":43},"CVE-2023-28464",{"_key":45},"CVE-2023-28772",[],[],[49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64],{"_key":15},{"_key":17},{"_key":19},{"_key":21},{"_key":23},{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},"2023-07-06T01:18:33Z","2026-02-04T02:25:54.922426Z",{"cisa_kev":68,"cisa_ransomware":68,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[70,77,82,86,90,94,98,102,106,110,114,118,122,126,130,134,138,142,146,150,154,158,162,166,170,174,179,183,187,191,195,199,203,207,211,215,219,223,227,231,235],{"url":71,"sources":72,"tags":75},"https://www.suse.com/support/update/announcement/2023/suse-su-20231848-1/",[73,74],"osv_suse","osv_opensuse",[76],"Advisory",{"url":78,"sources":79,"tags":80},"https://bugzilla.suse.com/1076830",[73,74],[81],"REPORT",{"url":83,"sources":84,"tags":85},"https://bugzilla.suse.com/1192273",[73,74],[81],{"url":87,"sources":88,"tags":89},"https://bugzilla.suse.com/1194535",[73,74],[81],{"url":91,"sources":92,"tags":93},"https://bugzilla.suse.com/1207036",[73,74],[81],{"url":95,"sources":96,"tags":97},"https://bugzilla.suse.com/1207125",[73,74],[81],{"url":99,"sources":100,"tags":101},"https://bugzilla.suse.com/1207168",[73,74],[81],{"url":103,"sources":104,"tags":105},"https://bugzilla.suse.com/1207795",[73,74],[81],{"url":107,"sources":108,"tags":109},"https://bugzilla.suse.com/1208179",[73,74],[81],{"url":111,"sources":112,"tags":113},"https://bugzilla.suse.com/1208599",[73,74],[81],{"url":115,"sources":116,"tags":117},"https://bugzilla.suse.com/1208777",[73,74],[81],{"url":119,"sources":120,"tags":121},"https://bugzilla.suse.com/1208811",[73,74],[81],{"url":123,"sources":124,"tags":125},"https://bugzilla.suse.com/1208850",[73,74],[81],{"url":127,"sources":128,"tags":129},"https://bugzilla.suse.com/1209008",[73,74],[81],{"url":131,"sources":132,"tags":133},"https://bugzilla.suse.com/1209052",[73,74],[81],{"url":135,"sources":136,"tags":137},"https://bugzilla.suse.com/1209256",[73,74],[81],{"url":139,"sources":140,"tags":141},"https://bugzilla.suse.com/1209289",[73,74],[81],{"url":143,"sources":144,"tags":145},"https://bugzilla.suse.com/1209291",[73,74],[81],{"url":147,"sources":148,"tags":149},"https://bugzilla.suse.com/1209532",[73,74],[81],{"url":151,"sources":152,"tags":153},"https://bugzilla.suse.com/1209547",[73,74],[81],{"url":155,"sources":156,"tags":157},"https://bugzilla.suse.com/1209549",[73,74],[81],{"url":159,"sources":160,"tags":161},"https://bugzilla.suse.com/1209634",[73,74],[81],{"url":163,"sources":164,"tags":165},"https://bugzilla.suse.com/1209778",[73,74],[81],{"url":167,"sources":168,"tags":169},"https://bugzilla.suse.com/1209845",[73,74],[81],{"url":171,"sources":172,"tags":173},"https://bugzilla.suse.com/1209887",[73,74],[81],{"url":175,"sources":176,"tags":177},"https://www.suse.com/security/cve/CVE-2017-5753",[73,74],[178],"WEB",{"url":180,"sources":181,"tags":182},"https://www.suse.com/security/cve/CVE-2021-3923",[73,74],[178],{"url":184,"sources":185,"tags":186},"https://www.suse.com/security/cve/CVE-2021-4203",[73,74],[178],{"url":188,"sources":189,"tags":190},"https://www.suse.com/security/cve/CVE-2022-20567",[73,74],[178],{"url":192,"sources":193,"tags":194},"https://www.suse.com/security/cve/CVE-2023-0394",[73,74],[178],{"url":196,"sources":197,"tags":198},"https://www.suse.com/security/cve/CVE-2023-0590",[73,74],[178],{"url":200,"sources":201,"tags":202},"https://www.suse.com/security/cve/CVE-2023-1076",[73,74],[178],{"url":204,"sources":205,"tags":206},"https://www.suse.com/security/cve/CVE-2023-1095",[73,74],[178],{"url":208,"sources":209,"tags":210},"https://www.suse.com/security/cve/CVE-2023-1281",[73,74],[178],{"url":212,"sources":213,"tags":214},"https://www.suse.com/security/cve/CVE-2023-1390",[73,74],[178],{"url":216,"sources":217,"tags":218},"https://www.suse.com/security/cve/CVE-2023-1513",[73,74],[178],{"url":220,"sources":221,"tags":222},"https://www.suse.com/security/cve/CVE-2023-23454",[73,74],[178],{"url":224,"sources":225,"tags":226},"https://www.suse.com/security/cve/CVE-2023-23455",[73,74],[178],{"url":228,"sources":229,"tags":230},"https://www.suse.com/security/cve/CVE-2023-28328",[73,74],[178],{"url":232,"sources":233,"tags":234},"https://www.suse.com/security/cve/CVE-2023-28464",[73,74],[178],{"url":236,"sources":237,"tags":238},"https://www.suse.com/security/cve/CVE-2023-28772",[73,74],[178],[],[],[],[243,256,261,266,271,276,282,286,290,294,298,303,307,311,318,323,327,331,336,340,344,349,353,357],{"ecosystem":244,"name":245,"vendor":246,"product":247,"cpe_part":9,"purl_type":248,"purl_namespace":246,"purl_name":247,"source":9,"versions":249},"openSUSE","kernel-debug","opensuse","kernel-debug&distro=openSUSE Leap 15.4","rpm",[250],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},"lt4_12_14_150100_197_142_1",true,"ecosystem","4.12.14-150100.197.142.1","excluding",{"ecosystem":244,"name":257,"vendor":246,"product":258,"cpe_part":9,"purl_type":248,"purl_namespace":246,"purl_name":258,"source":9,"versions":259},"kernel-default","kernel-default&distro=openSUSE Leap 15.4",[260],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":244,"name":262,"vendor":246,"product":263,"cpe_part":9,"purl_type":248,"purl_namespace":246,"purl_name":263,"source":9,"versions":264},"kernel-kvmsmall","kernel-kvmsmall&distro=openSUSE Leap 15.4",[265],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":244,"name":267,"vendor":246,"product":268,"cpe_part":9,"purl_type":248,"purl_namespace":246,"purl_name":268,"source":9,"versions":269},"kernel-vanilla","kernel-vanilla&distro=openSUSE Leap 15.4",[270],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":244,"name":272,"vendor":246,"product":273,"cpe_part":9,"purl_type":248,"purl_namespace":246,"purl_name":273,"source":9,"versions":274},"kernel-zfcpdump","kernel-zfcpdump&distro=openSUSE Leap 15.4",[275],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":257,"vendor":278,"product":279,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":279,"source":9,"versions":280},"SUSE Linux Enterprise","suse","kernel-default&distro=SUSE Linux Enterprise High Availability Extension 15 SP1",[281],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":257,"vendor":278,"product":283,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":283,"source":9,"versions":284},"kernel-default&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",[285],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":257,"vendor":278,"product":287,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":287,"source":9,"versions":288},"kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP1",[289],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":257,"vendor":278,"product":291,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":291,"source":9,"versions":292},"kernel-default&distro=SUSE Linux Enterprise Server 15 SP1-LTSS",[293],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":257,"vendor":278,"product":295,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":295,"source":9,"versions":296},"kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1",[297],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":299,"vendor":278,"product":300,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":300,"source":9,"versions":301},"kernel-docs","kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",[302],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":299,"vendor":278,"product":304,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":304,"source":9,"versions":305},"kernel-docs&distro=SUSE Linux Enterprise Server 15 SP1-LTSS",[306],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":299,"vendor":278,"product":308,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":308,"source":9,"versions":309},"kernel-docs&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1",[310],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":312,"vendor":278,"product":313,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":313,"source":9,"versions":314},"kernel-livepatch-SLE15-SP1_Update_39","kernel-livepatch-SLE15-SP1_Update_39&distro=SUSE Linux Enterprise Live Patching 15 SP1",[315],{"version":316,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":317,"version_end_type":255,"fixed_in":9},"lt1_150100_3_5_1","1-150100.3.5.1",{"ecosystem":277,"name":319,"vendor":278,"product":320,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":320,"source":9,"versions":321},"kernel-obs-build","kernel-obs-build&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",[322],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":319,"vendor":278,"product":324,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":324,"source":9,"versions":325},"kernel-obs-build&distro=SUSE Linux Enterprise Server 15 SP1-LTSS",[326],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":319,"vendor":278,"product":328,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":328,"source":9,"versions":329},"kernel-obs-build&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1",[330],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":332,"vendor":278,"product":333,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":333,"source":9,"versions":334},"kernel-source","kernel-source&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",[335],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":332,"vendor":278,"product":337,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":337,"source":9,"versions":338},"kernel-source&distro=SUSE Linux Enterprise Server 15 SP1-LTSS",[339],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":332,"vendor":278,"product":341,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":341,"source":9,"versions":342},"kernel-source&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1",[343],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":345,"vendor":278,"product":346,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":346,"source":9,"versions":347},"kernel-syms","kernel-syms&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",[348],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":345,"vendor":278,"product":350,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":350,"source":9,"versions":351},"kernel-syms&distro=SUSE Linux Enterprise Server 15 SP1-LTSS",[352],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":345,"vendor":278,"product":354,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":354,"source":9,"versions":355},"kernel-syms&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1",[356],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9},{"ecosystem":277,"name":272,"vendor":278,"product":358,"cpe_part":9,"purl_type":248,"purl_namespace":278,"purl_name":358,"source":9,"versions":359},"kernel-zfcpdump&distro=SUSE Linux Enterprise Server 15 SP1-LTSS",[360],{"version":251,"is_range":252,"range_type":253,"version_start":9,"version_start_type":9,"version_end":254,"version_end_type":255,"fixed_in":9}]