SUSE-SU-2023:0767-1
SUSE-SU-2023:0767-1 · Security update for the Linux Kernel
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-default SUSE:Linux Enterprise Server 12 SP2-BCL
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.4.121-92.202.5
Actualiza a 4.4.121-92.202.5
kernel-source SUSE:Linux Enterprise Server 12 SP2-BCL
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.4.121-92.202.6
Actualiza a 4.4.121-92.202.6
kernel-syms SUSE:Linux Enterprise Server 12 SP2-BCL
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.4.121-92.202.6
Actualiza a 4.4.121-92.202.6
Fuentes originales
- https://www.suse.com/support/update/announcement/2023/suse-su-20230767-1/
- https://bugzilla.suse.com/1203331
- https://bugzilla.suse.com/1203332
- https://bugzilla.suse.com/1207051
- https://bugzilla.suse.com/1207795
- https://bugzilla.suse.com/1208700
- https://bugzilla.suse.com/1209188
- https://www.suse.com/security/cve/CVE-2022-36280
- https://www.suse.com/security/cve/CVE-2022-38096
- https://www.suse.com/security/cve/CVE-2023-0590
- https://www.suse.com/security/cve/CVE-2023-23559
- https://www.suse.com/security/cve/CVE-2023-26545
- https://osv.dev/vulnerability/SUSE-SU-2023:0767-1