SUSE-SU-2023:4031-1

SUSE-SU-2023:4031-1 · Security update for the Linux Kernel

Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.

Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858). - CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861). - CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467). - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table which could be exploited by network adjacent attackers, increasing CPU usage by 95% (bsc#1212703). - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalation (bsc#1215275). - CVE-2023-0394: Fixed a NULL pointer dereference in the IPv6 stack that could lead to denial of service (bsc#1207168). - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115). - CVE-2020-36766: Fixed a potential information leak in in the CEC driver (bsc#1215299). - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169). - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221). - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995). The following non-security bugs were fixed: - 9p/trans_virtio: Remove sysfs file on probe failure (git-fixes). - Drivers: hv: vmbus: Do not dereference ACPI root object handle (git-fixes). - Input: psmouse - fix OOB access in Elantech protocol (git-fixes). - Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes). - Input: xpad - add constants for GIP interface numbers (git-fixes). - Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes). - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215897). - KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215898). - NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes). - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (git-fixes). - README: update rebuilding information (jsc#PED-5021). - USB: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes). - USB: serial: option: add Quectel EM05G variant (0x030e) (git-fixes). - VSOCK: handle VIRTIO_VSOCK_OP_CREDIT_REQUEST (git-fixes). - arm64: insn: Fix ldadd instruction encoding (git-fixes) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes) - blacklist.conf: workqueue: compiler warning on 32-bit systems with Clang (bsc#1215877) - blk-mq: Add blk_mq_delay_run_hw_queues() API call (bsc#1214586). - blk-mq: In blk_mq_dispatch_rq_list() 'no budget' is a reason to kick (bsc#1214586). - blk-mq: Rerun dispatching in the case of budget contention (bsc#1214586). - btrfs: output extra debug info on failure (bsc#1215136). - config: do not incorrectly set CONFIG_BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). - direct-io: allow direct writes to empty inodes (bsc#1215164). - drm/ast: Fix DRAM init on AST2200 (bsc#1152446) - drm/client: Fix memory leak in drm_client_target_cloned (bsc#1152446). - drm/client: Send hotplug event after registering a client (bsc#1152446). - drm/virtio: Fix GEM handle creation UAF (git-fixes). - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes (git-fixes). - ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016). - ext4: correct inline offset when handling xattrs in inode body (bsc#1214950). - ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943). - ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940). - fbcon: Fix null-ptr-deref in soft_cursor (bsc#1154048). - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (bsc#1154048) - fbdev: imxfb: warn about invalid left/right margin (bsc#1154048) - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1154048) - fbdev: omapfb: lcd_mipid: Fix an error handling path in (bsc#1154048). - firmware: raspberrypi: Introduce devm_rpi_firmware_get() (git-fixes). - firmware: raspberrypi: Keep count of all consumers (git-fixes). - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (git-fixes). - fs: avoid softlockups in s_inodes iterators (bsc#1215165). - fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215607). - hv_utils: Fix passing zero to 'PTR_ERR' warning (git-fixes). - idr: fix param name in idr_alloc_cyclic() doc (bsc#1109837). - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948). - jbd2: check 'jh->b_transaction' before removing it from checkpoint (bsc#1214953). - jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949). - jbd2: fix checkpoint cleanup performance regression (bsc#1214952). - jbd2: recheck chechpointing non-dirty buffer (bsc#1214945). - jbd2: remove t_checkpoint_io_list (bsc#1214946). - jbd2: remove unused function '__cp_buffer_busy' (bsc#1215162). - jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946). - jbd2: simplify journal_clean_one_cp_list() (bsc#1215207). - media: b2c2: Add missing check in flexcop_pci_isr: (git-fixes). - media: cec-notifier: clear cec_adap in cec_notifier_unregister (git-fixes). - media: cec: copy sequence field for the reply (git-fixes). - media: cec: integrate cec_validate_phys_addr() in cec-api.c (git-fixes). - media: cec: make cec_get_edid_spa_location() an inline function (git-fixes). - media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init() (git-fixes). - media: mceusb: return without resubmitting URB in case of -EPROTO error (git-fixes). - media: s5p_cec: decrement usage count if disabled (git-fixes). - media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds (git-fixes). - mkspec: Allow unsupported KMPs (bsc#1214386) - net/mlx5: Fix size field in bufferx_reg struct (git-fixes). - net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes). - net: check if protocol extracted by virtio_net_hdr_set_proto is correct (git-fixes). - net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes). - net: ensure mac header is set in virtio_net_hdr_to_skb() (git-fixes). - net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (git-fixes). - net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes). - net: virtio_vsock: Enhance connection semantics (git-fixes). - nfsd: fix change_info in NFSv4 RENAME replies (git-fixes). - powerpc/64s/exception: machine check use correct cfar for late handler (bsc#1065729). - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729). - powerpc/xics: Remove unnecessary endian conversion (bsc#1065729). - quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961). - quota: fix warning in dqgrab() (bsc#1214962). - remoteproc: Add missing '\n' in log messages (git-fixes). - remoteproc: Fix NULL pointer dereference in rproc_virtio_notify (git-fixes). - s390/dasd: fix hanging device after request requeue (LTC#203632 bsc#1215121). - s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215152). - s390: add z16 elf platform (LTC#203790 bsc#1215954). - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes). - scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN (git-fixes bsc#1215149). - tools/virtio: fix the vringh test for virtio ring changes (git-fixes). - tracing: Reverse the order

Korrektur verfügbar

Veröffentlicht

2023-10-10T12:19:00Z

Aktualisiert

2026-02-04T03:27:21.870942Z

Technologie-Stack: system

Prüfen Sie Ihren Server →