SUSE-SU-2023:2822-1

SUSE-SU-2023:2822-1 · Security update for the Linux Kernel

Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.

Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-3268: Fixed an out of bounds (OOB) memory access flaw in relay_file_read_start_pos in kernel/relay.c (bsc#1212502). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). - CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501). - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). - CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). The following non-security bugs were fixed: - Decrease the number of SMB3 smbdirect client SGEs (bsc#1190317). - Drop dvb-core fix patch due to bug (bsc#1205758). - Fix formatting of client smbdirect RDMA logging (bsc#1190317). - Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158). - Fix usrmerge error (boo#1211796). - Handle variable number of SGEs in client smbdirect send (bsc#1190317). - Reduce client smbdirect max receive segment size (bsc#1190317). - Remove usrmerge compatibility symlink in buildroot (boo#1211796) - affs: initialize fsdata in affs_truncate() (git-fixes). - bnx2x: Check if transceiver implements DDM before access (git-fixes). - bnxt_en: Fix mqprio and XDP ring checking logic (git-fixes). - bnxt_en: Fix typo in PCI id to device description string mapping (git-fixes). - bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes). - bnxt_en: Remove debugfs when pci_register_driver failed (git-fixes). - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (git-fixes). - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (git-fixes). - bnxt_en: reclaim max resources if sriov enable fails (git-fixes). - bugzilla-create: always end email with @suse.com - bugzilla-create: take bugzilla email from BUGZILLA_ACCOUNT_EMAIL env var Some people have emails in bugzilla that are completely different than emails they use in git and providing one with -e option is tedious. Make bugzilla-create more flexible by providing the third options that sits between command line option and git-config automation. - cdc-ncm: avoid overflow in sanity checking (git-fixes). - ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212938). - cifs: Add helper function to check smb1+ server (bsc#1190317). - cifs: Convert struct fealist away from 1-element array (bsc#1190317). - cifs: Fix connections leak when tlink setup failed (bsc#1190317). - cifs: Fix lost destroy smbd connection when MR allocate failed (bsc#1190317). - cifs: Fix memory leak when build ntlmssp negotiate blob failed (bsc#1190317). - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (bsc#1190317). - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (bsc#1190317). - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (bsc#1190317). - cifs: Fix smb2_set_path_size() (bsc#1190317). - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (bsc#1190317). - cifs: Fix uninitialized memory read for smb311 posix symlink create (bsc#1190317). - cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1190317). - cifs: Fix uninitialized memory reads for oparms.mode (bsc#1190317). - cifs: Fix use-after-free in rdata->read_into_pages() (bsc#1190317). - cifs: Fix warning and UAF when destroy the MR list (bsc#1190317). - cifs: Fix wrong return value checking when GETFLAGS (bsc#1190317). - cifs: Fix xid leak in cifs_copy_file_range() (bsc#1190317). - cifs: Fix xid leak in cifs_create() (bsc#1190317). - cifs: Fix xid leak in cifs_flock() (bsc#1190317). - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1190317). - cifs: Move the in_send statistic to __smb_send_rqst() (bsc#1190317). - cifs: Remove duplicated include in cifsglob.h (bsc#1190317). - cifs: Replace zero-length arrays with flexible-array members (bsc#1190317). - cifs: Spelling s/EACCESS/EACCES/ (bsc#1190317). - cifs: Use help macro to get the header preamble size (bsc#1190317). - cifs: Use help macro to get the mid header size (bsc#1190317). - cifs: Use kstrtobool() instead of strtobool() (bsc#1190317). - cifs: add check for returning value of SMB2_close_init (bsc#1190317). - cifs: add check for returning value of SMB2_set_info_init (bsc#1190317). - cifs: add missing spinlock around tcon refcount (bsc#1190317). - cifs: always initialize struct msghdr smb_msg completely (bsc#1190317). - cifs: avoid re-lookups in dfs_cache_find() (bsc#1190317). - cifs: avoid use of global locks for high contention data (bsc#1190317). - cifs: destage dirty pages before re-reading them for cache=none (bsc#1190317). - cifs: do not include page data when checking signature (bsc#1190317). - cifs: do not send down the destination address to sendmsg for a SOCK_STREAM (bsc#1190317). - cifs: do not take exclusive lock for updating target hints (bsc#1190317). - cifs: do not try to use rdma offload on encrypted connections (bsc#1190317). - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1190317). - cifs: fix confusing debug message (bsc#1190317). - cifs: fix double free on failed kerberos auth (bsc#1190317). - cifs: fix double-fault crash during ntlmssp (bsc#1190317). - cifs: fix indentation in make menuconfig options (bsc#1190317). - cifs: fix memory leaks in session setup (bsc#1190317). - cifs: fix missing display of three mount options (bsc#1190317). - cifs: fix mount on old smb servers (bsc#1190317). - cifs: fix oops during encryption (bsc#1190317). - cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1190317). - cifs: fix potential deadlock in cache_refresh_path() (bsc#1190317). - cifs: fix potential memory leaks in session setup (bsc#1190317). - cifs: fix race in assemble_neg_contexts() (bsc#1190317). - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1190317). - cifs: fix small mempool leak in SMB2_negotiate() (bsc#1190317). - cifs: fix use-after-free caused by invalid pointer `hostname` (bsc#1190317). - cifs: fix various whitespace errors in headers (bsc#1190317). - cifs: get rid of dns resolve worker (bsc#1190317). - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1190317). - cifs: handle cache lookup errors different than -ENOENT (bsc#1190317). - cifs: ignore ipc reconnect failures during dfs failover (bsc#1190317). - cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1190317). - cifs: lease key is uninitialized in smb1 paths (bsc#1190317). - cifs: lease key is uninitialized in two additional functions when smb1 (bsc#1190317). - cifs: match even the scope id for ipv6 addresses (bsc#1190317). - cifs: minor cleanup of some headers (bsc#1

Korrektur verfügbar

Veröffentlicht

2023-07-14T07:33:01Z

Aktualisiert

2025-05-02T04:34:14.302317Z

Technologie-Stack: system

Prüfen Sie Ihren Server →