{"schemaVersion":3,"id":"SUSE-SU-2023:4028-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for the Linux Kernel\n\n\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity() that could cause memory corruption (bsc#1208600).\n- CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115).\n- CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).\n- CVE-2023-20588: Fixed a potential data leak that could be triggered through a side channel when division by zero occurred on some AMD processors (bsc#1213927).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in the vmxnet3 driver that may have allowed a local attacker with user privileges to cause a denial of service (bsc#1214451).\n- CVE-2023-3772: Fixed a flaw in the XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to denial of service (bsc#1213666).\n- CVE-2023-2007: Removed the dpt_i2o driver due to security issues (bsc#1210448, jsc#PED-4579).\n- CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check (bsc#1214348).","dates":{"published":"2023-10-10T12:06:24.000Z","modified":"2026-02-04T04:27:54.920Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-default","label":"kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.147.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.147.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-ec2","label":"kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.147.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.147.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-source","label":"kernel-source&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.147.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.147.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-syms","label":"kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.147.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.147.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-trace","label":"kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.147.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.147.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-xen","label":"kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.147.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.147.1","eol":null,"hubHref":null}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234028-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20234028-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1208600","label":"bugzilla.suse.com/1208600","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1208995","label":"bugzilla.suse.com/1208995","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1210448","label":"bugzilla.suse.com/1210448","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1213666","label":"bugzilla.suse.com/1213666","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1213927","label":"bugzilla.suse.com/1213927","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1214348","label":"bugzilla.suse.com/1214348","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1214451","label":"bugzilla.suse.com/1214451","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1215115","label":"bugzilla.suse.com/1215115","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1077","label":"www.suse.com/security/cve/CVE-2023-1077","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1192","label":"www.suse.com/security/cve/CVE-2023-1192","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2007","label":"www.suse.com/security/cve/CVE-2023-2007","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20588","label":"www.suse.com/security/cve/CVE-2023-20588","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3772","label":"www.suse.com/security/cve/CVE-2023-3772","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4385","label":"www.suse.com/security/cve/CVE-2023-4385","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4459","label":"www.suse.com/security/cve/CVE-2023-4459","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4623","label":"www.suse.com/security/cve/CVE-2023-4623","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2023-1077","CVE-2023-1192","CVE-2023-2007","CVE-2023-20588","CVE-2023-3772","CVE-2023-4385","CVE-2023-4459","CVE-2023-4623"],"downstream":[],"duplicates":[],"related":["CVE-2023-1077","CVE-2023-1192","CVE-2023-2007","CVE-2023-20588","CVE-2023-3772","CVE-2023-4385","CVE-2023-4459","CVE-2023-4623"]},"timeline":[{"kind":"published","date":"2023-10-10T12:06:24.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:27:54.920Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T11:37:58.358Z","stale":false,"partial":false}}