SUSE-SU-2023:1803-1

SUSE-SU-2023:1803-1 · Security update for the Linux Kernel

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547). - CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256). - CVE-2021-3923: Fixed stack information leak vulnerability that could lead to kernel protection bypass in infiniband RDMA (bsc#1209778). - CVE-2022-20567: Fixed use after free that could lead to a local privilege escalation in pppol2tp_create of l2tp_ppp.c (bsc#1208850). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634). - CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1209289). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036). - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207125). - CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291). - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052). - CVE-2023-28772: Fixed buffer overflow in seq_buf_putmem_hex in lib/seq_buf.c (bsc#1209549). The following non-security bugs were fixed: - Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes). - Bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - Do not sign the vanilla kernel (bsc#1209008). - Input: atmel_mxt_ts - fix double free in mxt_read_info_block (git-fixes). - KVM: arm64: Hide system instruction access to Trace registers (git-fixes) - NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes). [iivanov] Fix Patch-mainline to v6.3-rc5 - PCI/MSI: Enforce MSI entry updates to be visible (git-fixes). - PCI/MSI: Enforce that MSI-X table entry is masked for update (git-fixes). - PCI/MSI: Mask all unused MSI-X entries (git-fixes). - PCI/MSI: Skip masking MSI-X on Xen PV (git-fixes). - PCI/PM: Always return devices to D0 when thawing (git-fixes). - PCI/PM: Avoid using device_may_wakeup() for runtime PM (git-fixes). - PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints (git-fixes). - PCI: Add ACS quirk for iProc PAXB (git-fixes). - PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0 (git-fixes). - PCI: Avoid FLR for AMD Starship USB 3.0 (git-fixes). - PCI: Make ACS quirk implementations more uniform (git-fixes). - PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently (git-fixes). - PCI: PM: Avoid skipping bus-level PM on platforms without ACPI (git-fixes). - PCI: Unify ACS quirk desired vs provided checking (git-fixes). - PCI: Use pci_update_current_state() in pci_enable_device_flags() (git-fixes). - PCI: aardvark: Do not blindly enable ASPM L0s and do not write to read-only register (git-fixes). - PCI: aardvark: Do not rely on jiffies while holding spinlock (git-fixes). - PCI: aardvark: Do not touch PCIe registers if no card connected (git-fixes). - PCI: aardvark: Fix a leaked reference by adding missing of_node_put() (git-fixes). - PCI: aardvark: Fix checking for PIO Non-posted Request (git-fixes). - PCI: aardvark: Fix kernel panic during PIO transfer (git-fixes). - PCI: aardvark: Improve link training (git-fixes). - PCI: aardvark: Indicate error in 'val' when config read fails (git-fixes). - PCI: aardvark: Introduce an advk_pcie_valid_device() helper (git-fixes). - PCI: aardvark: Remove PCIe outbound window configuration (git-fixes). - PCI: aardvark: Train link immediately after enabling training (git-fixes). - PCI: aardvark: Wait for endpoint to be ready before training link (git-fixes). - PCI: endpoint: Cast the page number to phys_addr_t (git-fixes). - PCI: endpoint: Fix for concurrent memory allocation in OB address region (git-fixes). - PCI: hv: Add a per-bus mutex state_lock (bsc#1207001). - PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207001). - PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207001). - PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207001). - PCI: qcom: Use PHY_REFCLK_USE_PAD only for ipq8064 (git-fixes). - PCI: tegra: Fix OF node reference leak (git-fixes). - PCI: xgene-msi: Fix race in installing chained irq handler (git-fixes). - PM: hibernate: flush swap writer after marking (git-fixes). - README.BRANCH: Adding myself to the maintainer list - README: remove copy of config and update the text (bsc#1191924) - Revert 'PCI: hv: Fix a timing issue which causes kdump to fail occasionally' (bsc#1207001). - Revert 'arm64: dts: juno: add dma-ranges property' (git-fixes) - Revert 'mei: me: enable asynchronous probing' (bsc#1208048, bsc#1209126). - SUNRPC: Fix a server shutdown leak (git-fixes). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arm64/alternatives: do not patch up internal branches (git-fixes) - arm64/alternatives: move length validation inside the subsection (git-fixes) - arm64/alternatives: use subsections for replacement sequences (git-fixes) - arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes) - arm64/mm: fix variable 'pud' set but not used (git-fixes) - arm64/mm: return cpu_all_mask when node is NUMA_NO_NODE (git-fixes) - arm64/vdso: Discard .note.gnu.property sections in vDSO (git-fixes) - arm64: Discard .note.GNU-stack section (bsc#1203693 bsc#1209798). - arm64: Do not forget syscall when starting a new thread. (git-fixes) - arm64: Fix compiler warning from pte_unmap() with (git-fixes) - arm64: Mark __stack_chk_guard as __ro_after_init (git-fixes) - arm64: Use test_tsk_thread_flag() for checking TIF_SINGLESTEP (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: cpu_ops: fix a leaked reference by adding missing of_node_put (git-fixes) - arm64: fix oops in concurrently setting insn_emulation sysctls (git-fixes) - arm64: kprobe: make page to RO mode when allocate it (git-fixes) - arm64: kpti: ensure patched kernel text is fetched from PoU (git-fixes) - arm64: psci: Avoid printing in cpu_psci_cpu_die() (git-fixes) - arm64: psci: Reduce the waiting time for cpu_psci_cpu_kill() (git-fixes) - arm64: unwind: Prohibit probing on return_address() (git-fixes) - crypto: arm64 - Fix unused variable compilation warnings of (git-fixes) - dt-bindings: reset: meson8b: fix duplicate reset IDs (git-fixes). - ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes). - git_sort: tests: Adjust to new net repository location - git_sort: tests: Fix tests failing on SLE15 Use the correct base image, pygit2 is not found by pythong otherwise. - git_sort: tests: Kernel:tools does not have Leap repos, use SLE - git_sort: tests: Use 15.4, 15.3 is EOL - git_sort: tests: do not disable package repository GPG check This adds the Kernel repository key and enables GPG check for package installation inside containers. - git_sort: tests: exit on error - ima: Fix function name error in comment (git-fixes). - ipv4: route: fix inet_rtm_getroute induced crash (git-fixes). - kabi: PCI: endpoint: Fix for concurrent memory allocation in OB address region (git-fixes). - kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179). - kfifo: fix ternary sign extension bugs (git-fixes). - kgdb: Drop malformed kernel doc comment (git-fixes). - media: coda: A

Correctif disponible

Publication

2023-04-10T09:07:18Z

Mise à jour

2026-02-04T02:43:48.842384Z

Pile logicielle: system

Vérifiez votre serveur →