{"schemaVersion":3,"id":"SUSE-SU-2023:2810-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for the Linux Kernel\n\n\nThe SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).\n- CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).\n- CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513).\n- CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).\n- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).\n- CVE-2023-3268: Fixed an out of bounds (OOB) memory access flaw in relay_file_read_start_pos in kernel/relay.c (bsc#1212502).\n- CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).\n- CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494).\n- CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504).\n- CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).\n- CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).\n- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).\n- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).\n\nThe following non-security bugs were fixed:\n\n- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).\n- Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes).\n- Drop dvb-core fix patch due to bug (bsc#1205758).\n- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).\n- Fix usrmerge error (boo#1211796)\n- Remove obsolete KMP obsoletes (bsc#1210469).\n- Replace mkinitrd dependency with dracut (bsc#1202353). Also update mkinitrd refrences in documentation and comments.\n- cifs: do not include page data when checking signature (bsc#1200217).\n- cifs: fix negotiate context parsing (bsc#1210301).\n- cifs: fix open leaks in open_cached_dir() (bsc#1209342).\n- google/gve:fix repeated words in comments (bsc#1211519).\n- gve: Adding a new AdminQ command to verify driver (bsc#1211519).\n- gve: Cache link_speed value from device (bsc#1211519).\n- gve: Fix GFP flags when allocing pages (bsc#1211519).\n- gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).\n- gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519).\n- gve: Handle alternate miss completions (bsc#1211519).\n- gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).\n- gve: Remove the code of clearing PBA bit (bsc#1211519).\n- gve: Secure enough bytes in the first TX desc for all TCP pkts (bsc#1211519).\n- gve: enhance no queue page list detection (bsc#1211519).\n- ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).\n- k-m-s: Drop Linux 2.6 support\n- kernel-binary: install expoline.o (boo#1210791 bsc#1211089)\n- keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).\n- rpm/kernel-binary.spec.in: Add Provides of kernel-preempt (jsc#SLE-18857) For smooth migration with the former kernel-preempt user, kernel-default provides kernel-preempt now when CONFIG_PREEMPT_DYNAMIC is defined.\n- rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm\n- rpm/kernel-binary.spec.in: Fix missing kernel-preempt-devel and KMP Provides (bsc#1199046)\n- rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)\n- s390,dcssblk,dax: Add dax zero_page_range operation to dcssblk driver (bsc#1199636).\n- sunrpc: Ensure the transport backchannel association (bsc#1211203).\n- usrmerge: Compatibility with earlier rpm (boo#1211796)\n- vmxnet3: use gro callback when UPT is enabled (bsc#1209739).\n- x86/build: Avoid relocation information in final vmlinux (bsc#1187829).","dates":{"published":"2023-07-12T09:34:43.000Z","modified":"2026-02-04T03:51:16.266Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"kernel-rt_debug&distro=SUSE Real Time Module 15 SP3","name":"kernel-rt_debug","label":"kernel-rt_debug&distro=SUSE Real Time Module 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt_debug&distro=SUSE Real Time Module 15 SP3","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.135.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.135.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.1","name":"kernel-rt","label":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt&distro=SUSE Linux Enterprise Micro 5.1","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.135.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.135.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.2","name":"kernel-rt","label":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt&distro=SUSE Linux Enterprise Micro 5.2","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.135.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.135.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-rt&distro=SUSE Real Time Module 15 SP3","name":"kernel-rt","label":"kernel-rt&distro=SUSE Real Time Module 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt&distro=SUSE Real Time Module 15 SP3","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.135.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.135.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source-rt&distro=SUSE Real Time Module 15 SP3","name":"kernel-source-rt","label":"kernel-source-rt&distro=SUSE Real Time Module 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE Real Time Module 15 SP3","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.135.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.135.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-syms-rt&distro=SUSE Real Time Module 15 SP3","name":"kernel-syms-rt","label":"kernel-syms-rt&distro=SUSE Real Time Module 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-syms-rt&distro=SUSE Real Time Module 15 SP3","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.135.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.135.1","eol":null,"hubHref":null}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232810-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20232810-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1160435","label":"bugzilla.suse.com/1160435","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1172073","label":"bugzilla.suse.com/1172073","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1187829","label":"bugzilla.suse.com/1187829","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1191731","label":"bugzilla.suse.com/1191731","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1199046","label":"bugzilla.suse.com/1199046","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1199636","label":"bugzilla.suse.com/1199636","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1200217","label":"bugzilla.suse.com/1200217","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1202353","label":"bugzilla.suse.com/1202353","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1205758","label":"bugzilla.suse.com/1205758","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1207088","label":"bugzilla.suse.com/1207088","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1208600","label":"bugzilla.suse.com/1208600","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209039","label":"bugzilla.suse.com/1209039","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209342","label":"bugzilla.suse.com/1209342","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1209739","label":"bugzilla.suse.com/1209739","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1210301","label":"bugzilla.suse.com/1210301","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1210469","label":"bugzilla.suse.com/1210469","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1210533","label":"bugzilla.suse.com/1210533","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1210791","label":"bugzilla.suse.com/1210791","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1211089","label":"bugzilla.suse.com/1211089","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1211203","label":"bugzilla.suse.com/1211203","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1211519","label":"bugzilla.suse.com/1211519","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1211592","label":"bugzilla.suse.com/1211592","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1211622","label":"bugzilla.suse.com/1211622","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1211796","label":"bugzilla.suse.com/1211796","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1212128","label":"bugzilla.suse.com/1212128","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1212129","label":"bugzilla.suse.com/1212129","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1212154","label":"bugzilla.suse.com/1212154","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1212158","label":"bugzilla.suse.com/1212158","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1212494","label":"bugzilla.suse.com/1212494","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1212501","label":"bugzilla.suse.com/1212501","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1212502","label":"bugzilla.suse.com/1212502","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1212504","label":"bugzilla.suse.com/1212504","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1212513","label":"bugzilla.suse.com/1212513","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1212606","label":"bugzilla.suse.com/1212606","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1212842","label":"bugzilla.suse.com/1212842","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1077","label":"www.suse.com/security/cve/CVE-2023-1077","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1249","label":"www.suse.com/security/cve/CVE-2023-1249","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2002","label":"www.suse.com/security/cve/CVE-2023-2002","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3090","label":"www.suse.com/security/cve/CVE-2023-3090","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3141","label":"www.suse.com/security/cve/CVE-2023-3141","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3159","label":"www.suse.com/security/cve/CVE-2023-3159","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3161","label":"www.suse.com/security/cve/CVE-2023-3161","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3268","label":"www.suse.com/security/cve/CVE-2023-3268","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3358","label":"www.suse.com/security/cve/CVE-2023-3358","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-35788","label":"www.suse.com/security/cve/CVE-2023-35788","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-35823","label":"www.suse.com/security/cve/CVE-2023-35823","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-35824","label":"www.suse.com/security/cve/CVE-2023-35824","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-35828","label":"www.suse.com/security/cve/CVE-2023-35828","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2023-1077","CVE-2023-1249","CVE-2023-2002","CVE-2023-3090","CVE-2023-3141","CVE-2023-3159","CVE-2023-3161","CVE-2023-3268","CVE-2023-3358","CVE-2023-35788","CVE-2023-35823","CVE-2023-35824","CVE-2023-35828"],"downstream":[],"duplicates":[],"related":["CVE-2023-1077","CVE-2023-1249","CVE-2023-2002","CVE-2023-3090","CVE-2023-3141","CVE-2023-3159","CVE-2023-3161","CVE-2023-3268","CVE-2023-3358","CVE-2023-35788","CVE-2023-35823","CVE-2023-35824","CVE-2023-35828"]},"timeline":[{"kind":"published","date":"2023-07-12T09:34:43.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:51:16.266Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T22:14:27.016Z","stale":false,"partial":false}}