SUSE-SU-2023:2148-1
Vulnerability Summary
Timeline
Description
Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498). - CVE-2023-1872:Fixed a use after free vulnerability in the io_uring subsystem, which could lead to local privilege escalation (bsc#1210414). - CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647). - CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege (bsc#1210629). - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506). - CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329). - CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453). - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202). - CVE-2020-36691: Fixed a denial of service vulnerability via a nested Netlink policy with a back reference (bsc#1209777). - CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336). - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203). The following non-security bugs were fixed: - Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes). - cifs: fix negotiate context parsing (bsc#1210301). - keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088). - vmxnet3: use gro callback when UPT is enabled (bsc#1209739).
Affected Systems
- opensuse•dtb-aarch64&distro=openSUSE Leap 15.4
< 5.3.18-150300.59.121.1
- suse•kernel-64kb&distro=SUSE Enterprise Storage 7.1
< 5.3.18-150300.59.121.2
- suse•kernel-64kb&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
< 5.3.18-150300.59.121.2
- suse•kernel-64kb&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
< 5.3.18-150300.59.121.2
- suse•kernel-64kb&distro=SUSE Linux Enterprise Server 15 SP3-LTSS
< 5.3.18-150300.59.121.2
- suse•kernel-default-base&distro=SUSE Enterprise Storage 7.1
< 5.3.18-150300.59.121.2.150300.18.70.2
- suse•kernel-default-base&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
< 5.3.18-150300.59.121.2.150300.18.70.2
- suse•kernel-default-base&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
< 5.3.18-150300.59.121.2.150300.18.70.2
- suse•kernel-default-base&distro=SUSE Linux Enterprise Micro 5.1
< 5.3.18-150300.59.121.2.150300.18.70.2
- suse•kernel-default-base&distro=SUSE Linux Enterprise Micro 5.2
< 5.3.18-150300.59.121.2.150300.18.70.2
- suse•kernel-default-base&distro=SUSE Linux Enterprise Real Time 15 SP3
< 5.3.18-150300.59.121.2.150300.18.70.2
- suse•kernel-default-base&distro=SUSE Linux Enterprise Server 15 SP3-LTSS
< 5.3.18-150300.59.121.2.150300.18.70.2
- suse•kernel-default-base&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3
< 5.3.18-150300.59.121.2.150300.18.70.2
- suse•kernel-default-base&distro=SUSE Manager Proxy 4.2
< 5.3.18-150300.59.121.2.150300.18.70.2
- suse•kernel-default-base&distro=SUSE Manager Server 4.2
< 5.3.18-150300.59.121.2.150300.18.70.2
- suse•kernel-default&distro=SUSE Enterprise Storage 7.1
< 5.3.18-150300.59.121.2
- suse•kernel-default&distro=SUSE Linux Enterprise High Availability Extension 15 SP3
< 5.3.18-150300.59.121.2
- suse•kernel-default&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
< 5.3.18-150300.59.121.2
- suse•kernel-default&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
< 5.3.18-150300.59.121.2
- suse•kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP3
< 5.3.18-150300.59.121.2
- suse•kernel-default&distro=SUSE Linux Enterprise Micro 5.1
< 5.3.18-150300.59.121.2
- suse•kernel-default&distro=SUSE Linux Enterprise Micro 5.2
< 5.3.18-150300.59.121.2
- suse•kernel-default&distro=SUSE Linux Enterprise Real Time 15 SP3
< 5.3.18-150300.59.121.2
- suse•kernel-default&distro=SUSE Linux Enterprise Server 15 SP3-LTSS
< 5.3.18-150300.59.121.2
- suse•kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3
< 5.3.18-150300.59.121.2
- suse•kernel-default&distro=SUSE Manager Proxy 4.2
< 5.3.18-150300.59.121.2
- suse•kernel-default&distro=SUSE Manager Server 4.2
< 5.3.18-150300.59.121.2
- suse•kernel-docs&distro=SUSE Enterprise Storage 7.1
< 5.3.18-150300.59.121.2
- suse•kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
< 5.3.18-150300.59.121.2
- suse•kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
< 5.3.18-150300.59.121.2
- suse•kernel-docs&distro=SUSE Linux Enterprise Real Time 15 SP3
< 5.3.18-150300.59.121.2
- suse•kernel-docs&distro=SUSE Linux Enterprise Server 15 SP3-LTSS
< 5.3.18-150300.59.121.2
- suse•kernel-docs&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3
< 5.3.18-150300.59.121.2
- suse•kernel-livepatch-SLE15-SP3_Update_32&distro=SUSE Linux Enterprise Live Patching 15 SP3
< 1-150300.7.3.2
- suse•kernel-obs-build&distro=SUSE Enterprise Storage 7.1
< 5.3.18-150300.59.121.2
- suse•kernel-obs-build&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
< 5.3.18-150300.59.121.2
- suse•kernel-obs-build&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
< 5.3.18-150300.59.121.2
- suse•kernel-obs-build&distro=SUSE Linux Enterprise Real Time 15 SP3
< 5.3.18-150300.59.121.2
- suse•kernel-obs-build&distro=SUSE Linux Enterprise Server 15 SP3-LTSS
< 5.3.18-150300.59.121.2
- suse•kernel-obs-build&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3
< 5.3.18-150300.59.121.2
- suse•kernel-preempt&distro=SUSE Enterprise Storage 7.1
< 5.3.18-150300.59.121.2
- suse•kernel-preempt&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
< 5.3.18-150300.59.121.2
- suse•kernel-preempt&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
< 5.3.18-150300.59.121.2
- suse•kernel-preempt&distro=SUSE Linux Enterprise Real Time 15 SP3
< 5.3.18-150300.59.121.2
- suse•kernel-preempt&distro=SUSE Linux Enterprise Server 15 SP3-LTSS
< 5.3.18-150300.59.121.2
- suse•kernel-preempt&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3
< 5.3.18-150300.59.121.2
- suse•kernel-preempt&distro=SUSE Manager Proxy 4.2
< 5.3.18-150300.59.121.2
- suse•kernel-preempt&distro=SUSE Manager Server 4.2
< 5.3.18-150300.59.121.2
- suse•kernel-source&distro=SUSE Enterprise Storage 7.1
< 5.3.18-150300.59.121.2
- suse•kernel-source&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
< 5.3.18-150300.59.121.2
Showing first 50 affected entries in server-rendered view.
References (38)
- https://www.suse.com/support/update/announcement/2023/suse-su-20232148-1/
- https://bugzilla.suse.com/1202353
- https://bugzilla.suse.com/1205128
- https://bugzilla.suse.com/1206992
- https://bugzilla.suse.com/1207088
- https://bugzilla.suse.com/1209687
- https://bugzilla.suse.com/1209739
- https://bugzilla.suse.com/1209777
- https://bugzilla.suse.com/1209871
- https://bugzilla.suse.com/1210202
- https://bugzilla.suse.com/1210203
- https://bugzilla.suse.com/1210301
- https://bugzilla.suse.com/1210329
- https://bugzilla.suse.com/1210336
- https://bugzilla.suse.com/1210337
- https://bugzilla.suse.com/1210414
- https://bugzilla.suse.com/1210453
- https://bugzilla.suse.com/1210469
- https://bugzilla.suse.com/1210498
- https://bugzilla.suse.com/1210506
- https://bugzilla.suse.com/1210629
- https://bugzilla.suse.com/1210647
- https://www.suse.com/security/cve/CVE-2020-36691
- https://www.suse.com/security/cve/CVE-2022-2196
- https://www.suse.com/security/cve/CVE-2022-43945
- https://www.suse.com/security/cve/CVE-2023-1611
- https://www.suse.com/security/cve/CVE-2023-1670
- https://www.suse.com/security/cve/CVE-2023-1838
- https://www.suse.com/security/cve/CVE-2023-1855
- https://www.suse.com/security/cve/CVE-2023-1872
- https://www.suse.com/security/cve/CVE-2023-1989
- https://www.suse.com/security/cve/CVE-2023-1990
- https://www.suse.com/security/cve/CVE-2023-1998
- https://www.suse.com/security/cve/CVE-2023-2008
- https://www.suse.com/security/cve/CVE-2023-2124
- https://www.suse.com/security/cve/CVE-2023-2162
- https://www.suse.com/security/cve/CVE-2023-2176
- https://www.suse.com/security/cve/CVE-2023-30772