{"schemaVersion":3,"id":"SUSE-SU-2023:1892-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for the Linux Kernel\n\n\nThe SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787).\n- CVE-2023-28772: Fixed buffer overflow in seq_buf_putmem_hex in lib/seq_buf.c (bsc#1209549).\n- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).\n- CVE-2023-28464: Fixed use-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).\n- CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168).\n- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366).\n- CVE-2021-3923: Fixed stack information leak vulnerability that could lead to kernel protection bypass in infiniband RDMA (bsc#1209778).\n- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1209289).\n- CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).\n- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).\n- CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636).\n- CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290).\n- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).\n- CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288).\n- CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291).\n- CVE-2023-1078: Fixed a heap out-of-bounds write in rds_rm_zerocopy_callback (bsc#1208601).\n- CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598).\n- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).\n\nThe following non-security bugs were fixed:\n\n- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (bsc#1207168).\n- net: ena: optimize data access in fast-path code (bsc#1208137).\n- PCI: hv: Add a per-bus mutex state_lock (bsc#1209785).\n- PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1209785).\n- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1209785).\n- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1209785).","dates":{"published":"2023-07-06T01:58:50.000Z","modified":"2025-05-02T04:29:47.990Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"kernel-rt_debug&distro=SUSE Real Time Module 15 SP3","name":"kernel-rt_debug","label":"kernel-rt_debug&distro=SUSE Real Time Module 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt_debug&distro=SUSE Real Time Module 15 SP3","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.124.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.124.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.1","name":"kernel-rt","label":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt&distro=SUSE Linux Enterprise Micro 5.1","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.124.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.124.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.2","name":"kernel-rt","label":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt&distro=SUSE Linux Enterprise Micro 5.2","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.124.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.124.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-rt&distro=SUSE Real Time Module 15 SP3","name":"kernel-rt","label":"kernel-rt&distro=SUSE Real Time Module 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt&distro=SUSE Real Time Module 15 SP3","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.124.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.124.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source-rt&distro=SUSE Real Time Module 15 SP3","name":"kernel-source-rt","label":"kernel-source-rt&distro=SUSE Real Time Module 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE Real Time Module 15 SP3","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.124.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.124.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-syms-rt&distro=SUSE Real Time Module 15 SP3","name":"kernel-syms-rt","label":"kernel-syms-rt&distro=SUSE Real Time Module 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-syms-rt&distro=SUSE Real Time Module 15 SP3","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.124.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.124.1","eol":null,"hubHref":null}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20231892-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1207168","label":"bugzilla.suse.com/1207168","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1208137","label":"bugzilla.suse.com/1208137","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1208598","label":"bugzilla.suse.com/1208598","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1208601","label":"bugzilla.suse.com/1208601","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1208787","label":"bugzilla.suse.com/1208787","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209052","label":"bugzilla.suse.com/1209052","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209256","label":"bugzilla.suse.com/1209256","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209288","label":"bugzilla.suse.com/1209288","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209289","label":"bugzilla.suse.com/1209289","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209290","label":"bugzilla.suse.com/1209290","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209291","label":"bugzilla.suse.com/1209291","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209366","label":"bugzilla.suse.com/1209366","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209532","label":"bugzilla.suse.com/1209532","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209547","label":"bugzilla.suse.com/1209547","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209549","label":"bugzilla.suse.com/1209549","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209634","label":"bugzilla.suse.com/1209634","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209635","label":"bugzilla.suse.com/1209635","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209636","label":"bugzilla.suse.com/1209636","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209778","label":"bugzilla.suse.com/1209778","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209785","label":"bugzilla.suse.com/1209785","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5753","label":"www.suse.com/security/cve/CVE-2017-5753","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3923","label":"www.suse.com/security/cve/CVE-2021-3923","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4744","label":"www.suse.com/security/cve/CVE-2022-4744","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0394","label":"www.suse.com/security/cve/CVE-2023-0394","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0461","label":"www.suse.com/security/cve/CVE-2023-0461","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1075","label":"www.suse.com/security/cve/CVE-2023-1075","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1078","label":"www.suse.com/security/cve/CVE-2023-1078","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1281","label":"www.suse.com/security/cve/CVE-2023-1281","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1382","label":"www.suse.com/security/cve/CVE-2023-1382","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1390","label":"www.suse.com/security/cve/CVE-2023-1390","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1513","label":"www.suse.com/security/cve/CVE-2023-1513","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1582","label":"www.suse.com/security/cve/CVE-2023-1582","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28327","label":"www.suse.com/security/cve/CVE-2023-28327","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28328","label":"www.suse.com/security/cve/CVE-2023-28328","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28464","label":"www.suse.com/security/cve/CVE-2023-28464","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28466","label":"www.suse.com/security/cve/CVE-2023-28466","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28772","label":"www.suse.com/security/cve/CVE-2023-28772","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2017-5753","CVE-2021-3923","CVE-2022-4744","CVE-2023-0394","CVE-2023-0461","CVE-2023-1075","CVE-2023-1078","CVE-2023-1281","CVE-2023-1382","CVE-2023-1390","CVE-2023-1513","CVE-2023-1582","CVE-2023-28327","CVE-2023-28328","CVE-2023-28464","CVE-2023-28466","CVE-2023-28772"],"downstream":[],"duplicates":[],"related":["CVE-2017-5753","CVE-2021-3923","CVE-2022-4744","CVE-2023-0394","CVE-2023-0461","CVE-2023-1075","CVE-2023-1078","CVE-2023-1281","CVE-2023-1382","CVE-2023-1390","CVE-2023-1513","CVE-2023-1582","CVE-2023-28327","CVE-2023-28328","CVE-2023-28464","CVE-2023-28466","CVE-2023-28772"]},"timeline":[{"kind":"published","date":"2023-07-06T01:58:50.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-05-02T04:29:47.990Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T16:14:30.387Z","stale":false,"partial":false}}