SUSE-SU-2023:4732-1

SUSE-SU-2023:4732-1 · Security update for the Linux Kernel

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2006: Fixed a race condition in the RxRPC network protocol (bsc#1210447). - CVE-2023-25775: Fixed improper access control in the Intel Ethernet Controller RDMA driver (bsc#1216959). - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095) - CVE-2023-39197: Fixed a out-of-bounds read in nf_conntrack_dccp_packet() (bsc#1216976). - CVE-2023-39198: Fixed a race condition leading to use-after-free in qxl_mode_dumb_create() (bsc#1216965). - CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420). - CVE-2023-45863: Fixed a out-of-bounds write in fill_kobj_path() (bsc#1216058). - CVE-2023-45871: Fixed an issue in the IGB driver, where the buffer size may not be adequate for frames larger than the MTU (bsc#1216259). - CVE-2023-46813: Fixed SEV-ES local priv escalation (bsc#1212649). - CVE-2023-46862: Fixed a NULL pointer dereference in io_uring_show_fdinfo() (bsc#1216693). - CVE-2023-5158: Fixed a denial of service in vringh_kiov_advance() in drivers/vhost/vringh.c in the host side of a virtio ring (bsc#1215710). - CVE-2023-5633: Fixed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface (bsc#1216527). - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216584). - CVE-2023-6039: Fixed a use-after-free in lan78xx_disconnect in drivers/net/usb/lan78xx.c (bsc#1217068). - CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217332). The following non-security bugs were fixed: - acpi: fpdt: properly handle invalid fpdt subtables (git-fixes). - acpi: resource: do irq override on tongfang gmxxgxx (git-fixes). - acpi: resource: skip irq override on asus expertbook b1402cva (git-fixes). - acpi: sysfs: fix create_pnp_modalias() and create_of_modalias() (git-fixes). - alsa: hda/realtek - add dell alc295 to pin fall back table (git-fixes). - alsa: hda/realtek - alc287 realtek i2s speaker platform support (git-fixes). - alsa: hda/realtek - enable internal speaker of asus k6500zc (git-fixes). - alsa: hda/realtek: add quirk for asus ux7602zm (git-fixes). - alsa: hda/realtek: add quirks for asus 2024 zenbooks (git-fixes). - alsa: hda/realtek: add quirks for hp laptops (git-fixes). - alsa: hda/realtek: add support dual speaker for dell (git-fixes). - alsa: hda/realtek: enable mute led on hp 255 g10 (git-fixes). - alsa: hda/realtek: enable mute led on hp 255 g8 (git-fixes). - alsa: hda: asus um5302la: added quirks for cs35l41/10431a83 on i2c bus (git-fixes). - alsa: hda: cs35l41: fix unbalanced pm_runtime_get() (git-fixes). - alsa: hda: cs35l41: undo runtime pm changes at driver exit time (git-fixes). - alsa: hda: disable power-save on kontron singlepc (bsc#1217140). - alsa: hda: fix possible null-ptr-deref when assigning a stream (git-fixes). - alsa: hda: intel-dsp-config: fix jsl chromebook quirk detection (git-fixes). - alsa: info: fix potential deadlock at disconnection (git-fixes). - alsa: usb-audio: add quirk flag to enable native dsd for mcintosh devices (git-fixes). - arm/xen: fix xen_vcpu_info allocation alignment (git-fixes). - arm64: add cortex-a520 cpu part definition (git-fixes) - arm64: allow kprobes on el0 handlers (git-fixes) - arm64: armv8_deprecated move emulation functions (git-fixes) - arm64: armv8_deprecated: fix unused-function error (git-fixes) - arm64: armv8_deprecated: fold ops into insn_emulation (git-fixes) - arm64: armv8_deprecated: move aarch32 helper earlier (git-fixes) - arm64: armv8_deprecated: rework deprected instruction handling (git-fixes) - arm64: consistently pass esr_elx to die() (git-fixes) - arm64: die(): pass 'err' as long (git-fixes) - arm64: factor insn read out of call_undef_hook() (git-fixes) - arm64: factor out el1 ssbs emulation hook (git-fixes) - arm64: report el1 undefs better (git-fixes) - arm64: rework bti exception handling (git-fixes) - arm64: rework el0 mrs emulation (git-fixes) - arm64: rework fpac exception handling (git-fixes) - arm64: split el0/el1 undef handlers (git-fixes) - arm: 9321/1: memset: cast the constant byte to unsigned char (git-fixes). - asoc: ams-delta.c: use component after check (git-fixes). - asoc: codecs: wsa-macro: fix uninitialized stack variables with name prefix (git-fixes). - asoc: cs35l41: undo runtime pm changes at driver exit time (git-fixes). - asoc: cs35l41: verify pm runtime resume errors in irq handler (git-fixes). - asoc: fsl: fix pm disable depth imbalance in fsl_easrc_probe (git-fixes). - asoc: fsl: mpc5200_dma.c: fix warning of function parameter or member not described (git-fixes). - asoc: hdmi-codec: register hpd callback on component probe (git-fixes). - asoc: intel: skylake: fix mem leak when parsing uuids fails (git-fixes). - asoc: rt5650: fix the wrong result of key button (git-fixes). - asoc: simple-card: fixup asoc_simple_probe() error handling (git-fixes). - asoc: sof: core: ensure sof_ops_free() is still called when probe never ran (git-fixes). - asoc: ti: omap-mcbsp: fix runtime pm underflow warnings (git-fixes). - ata: pata_isapnp: add missing error check for devm_ioport_map() (git-fixes). - atl1c: work around the dma rx overflow issue (git-fixes). - atm: iphase: do pci error checks on own line (git-fixes). - blk-mq: do not clear driver tags own mapping (bsc#1217366). - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (bsc#1217366). - bluetooth: add device 0bda:887b to device tables (git-fixes). - bluetooth: add device 13d3:3571 to device tables (git-fixes). - bluetooth: btusb: add 0bda:b85b for fn-link rtl8852be (git-fixes). - bluetooth: btusb: add date->evt_skb is null check (git-fixes). - bluetooth: btusb: add realtek rtl8852be support id 0x0cb8:0xc559 (git-fixes). - bluetooth: btusb: add rtw8852be device 13d3:3570 to device tables (git-fixes). - btrfs: always log symlinks in full mode (bsc#1214840). - can: dev: can_put_echo_skb(): do not crash kernel if can_priv::echo_skb is accessed out of bounds (git-fixes). - can: dev: can_restart(): do not crash kernel if carrier is ok (git-fixes). - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (git-fixes). - can: isotp: add local echo tx processing for consecutive frames (git-fixes). - can: isotp: fix race between isotp_sendsmg() and isotp_release() (git-fixes). - can: isotp: fix tx state handling for echo tx processing (git-fixes). - can: isotp: handle wait_event_interruptible() return values (git-fixes). - can: isotp: isotp_bind(): return -einval on incorrect can id formatting (git-fixes). - can: isotp: isotp_sendmsg(): fix tx state detection and wait behavior (git-fixes). - can: isotp: remove re-binding of bound socket (git-fixes). - can: isotp: sanitize can id checks in isotp_bind() (git-fixes). - can: isotp: set max pdu size to 64 kbyte (git-fixes). - can: isotp: split tx timer into transmission and timeout (git-fixes). - can: sja1000: fix comment (git-fixes). - clk: imx: imx8mq: correct error handling path (git-fixes). - clk: imx: imx8qxp: fix elcdif_pll clock (git-fixes). - clk: imx: select mxc_clk for clk_imx8qxp (git-fixes). - clk: keystone: pll: fix a couple null vs is_err() checks (git-fixes). - clk: mediatek: clk-mt2701: add check for mtk_alloc_clk_data (git-fixes). - clk: mediatek: clk-mt6765: add check for mtk_alloc_clk_data (git-fixes). - clk: mediatek: clk-mt6779: add check for mtk_alloc_clk_data (git-fixes). - clk: mediatek: clk-mt6797: add check for mtk_alloc_clk_data (git-fixes). - clk: mediatek: clk-mt7629-eth: add check for mtk_alloc_clk_data (git-fixes). - clk: mediatek: clk-mt7629: add check for mtk_alloc_clk_data (git-fixes). - clk: npcm7xx: fix inco

Corrección disponible

Publicación

2023-12-12T14:14:52Z

Actualización

2026-02-04T03:49:09.977421Z

Pila tecnológica: system

Comprueba tu servidor →