SUSE-SU-2023:1710-1
SUSE-SU-2023:1710-1 · Security update for the Linux Kernel
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. - CVE-2022-3523: Fixed a use after free related to device private page handling (bsc#1204363). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1078: Fixed a heap out-of-bounds write in rds_rm_zerocopy_callback (bsc#1208601). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837). - CVE-2023-22995: Fixed lacks of certain platform_device_put and kfree in drivers/usb/dwc3/dwc3-qcom.c (bsc#1208741). - CVE-2023-22998: Fixed NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776). - CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816). - CVE-2023-23004: Fixed misinterpretation of get_sg_table return value (bsc#1208843). - CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051). - CVE-2023-25012: Fixed a use-after-free in bigben_set_led() (bsc#1207560). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291). The following non-security bugs were fixed: - [infiniband] READ is 'data destination', not source... (git-fixes) - [xen] fix 'direction' argument of iov_iter_kvec() (git-fixes). - acpi/x86: Add support for LPS0 callback handler (git-fixes). - acpi: Do not build ACPICA with '-Os' (git-fixes). - acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes). - acpi: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224). - acpi: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224). - acpi: battery: Fix missing NUL-termination with large strings (git-fixes). - acpi: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes). - acpi: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes). - acpi: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224). - acpi: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224). - acpi: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224). - acpi: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224). - acpi: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224). - acpi: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224). - acpi: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224). - acpi: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224). - acpica: Drop port I/O validation for some regions (git-fixes). - acpica: nsrepair: handle cases without a return value correctly (git-fixes). - add cherry-picked id for nouveau patch - alsa: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes). - alsa: hda/ca0132: minor fix for allocation size (git-fixes). - alsa: hda/conexant: add a new hda codec SN6180 (git-fixes). - alsa: hda/realtek - fixed wrong gpio assigned (git-fixes). - alsa: hda/realtek: Add Positivo N14KP6-TG (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - alsa: hda: Do not unset preset when cleaning up codec (git-fixes). - alsa: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes). - alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes). - alsa: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (git-fixes). - alsa: pci: lx6464es: fix a debug loop (git-fixes). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arm64: Treat ESR_ELx as a 64-bit register (git-fixes) - arm64: atomics: remove LL/SC trampolines (git-fixes) - arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes). - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes). - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes). - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes). - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes). - arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes). - arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes). - arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes) - arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes). - arm64: dts: juno: Add missing MHU secure-irq (git-fixes) - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes). - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes). - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes). - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes). - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes). - arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes). - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes). - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes). - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes). - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes). - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes). - arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes). - arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes). - arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes). - arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sc7280: cor
Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
kernel-default SUSE:Linux Enterprise Micro 5.3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3
Auf 5.14.21-150400.24.55.3 aktualisieren
kernel-default-base SUSE:Linux Enterprise Micro 5.3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3.150400.24.22.7
Auf 5.14.21-150400.24.55.3.150400.24.22.7 aktualisieren
kernel-default SUSE:Linux Enterprise Micro 5.4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3
Auf 5.14.21-150400.24.55.3 aktualisieren
kernel-default-base SUSE:Linux Enterprise Micro 5.4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3.150400.24.22.7
Auf 5.14.21-150400.24.55.3.150400.24.22.7 aktualisieren
kernel-64kb SUSE:Linux Enterprise Module for Basesystem 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.2
Auf 5.14.21-150400.24.55.2 aktualisieren
kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3
Auf 5.14.21-150400.24.55.3 aktualisieren
kernel-default-base SUSE:Linux Enterprise Module for Basesystem 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3.150400.24.22.7
Auf 5.14.21-150400.24.55.3.150400.24.22.7 aktualisieren
kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.2
Auf 5.14.21-150400.24.55.2 aktualisieren
kernel-zfcpdump SUSE:Linux Enterprise Module for Basesystem 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.2
Auf 5.14.21-150400.24.55.2 aktualisieren
kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.1
Auf 5.14.21-150400.24.55.1 aktualisieren
kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3
Auf 5.14.21-150400.24.55.3 aktualisieren
kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.2
Auf 5.14.21-150400.24.55.2 aktualisieren
kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.1
Auf 5.14.21-150400.24.55.1 aktualisieren
kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3
Auf 5.14.21-150400.24.55.3 aktualisieren
kernel-default SUSE:Linux Enterprise Live Patching 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3
Auf 5.14.21-150400.24.55.3 aktualisieren
kernel-livepatch-sle15-sp4_update_10 SUSE:Linux Enterprise Live Patching 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 1-150400.9.3.7
Auf 1-150400.9.3.7 aktualisieren
kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3
Auf 5.14.21-150400.24.55.3 aktualisieren
kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3
Auf 5.14.21-150400.24.55.3 aktualisieren
kernel-default openSUSE:Leap Micro 5.3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3
Auf 5.14.21-150400.24.55.3 aktualisieren
kernel-default-base openSUSE:Leap Micro 5.3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3.150400.24.22.7
Auf 5.14.21-150400.24.55.3.150400.24.22.7 aktualisieren
dtb-aarch64 openSUSE:Leap 15.4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.1
Auf 5.14.21-150400.24.55.1 aktualisieren
kernel-64kb openSUSE:Leap 15.4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.2
Auf 5.14.21-150400.24.55.2 aktualisieren
kernel-debug openSUSE:Leap 15.4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3
Auf 5.14.21-150400.24.55.3 aktualisieren
kernel-default openSUSE:Leap 15.4
- Betroffene Versionsbereiche
- ECOSYSTEM: < 5.14.21-150400.24.55.3
Auf 5.14.21-150400.24.55.3 aktualisieren
Originalquellen
- https://www.suse.com/support/update/announcement/2023/suse-su-20231710-1/
- https://bugzilla.suse.com/1166486
- https://bugzilla.suse.com/1177529
- https://bugzilla.suse.com/1193629
- https://bugzilla.suse.com/1197534
- https://bugzilla.suse.com/1197617
- https://bugzilla.suse.com/1198438
- https://bugzilla.suse.com/1202353
- https://bugzilla.suse.com/1202633
- https://bugzilla.suse.com/1203200
- https://bugzilla.suse.com/1203331
- https://bugzilla.suse.com/1203332
- https://bugzilla.suse.com/1204363
- https://bugzilla.suse.com/1204993
- https://bugzilla.suse.com/1205544
- https://bugzilla.suse.com/1205846
- https://bugzilla.suse.com/1206103
- https://bugzilla.suse.com/1206224
- https://bugzilla.suse.com/1206232
- https://bugzilla.suse.com/1206459
- https://bugzilla.suse.com/1206492
- https://bugzilla.suse.com/1206493
- https://bugzilla.suse.com/1206640
- https://osv.dev/vulnerability/SUSE-SU-2023:1710-1