SUSE-SU-2023:3172-1

SUSE-SU-2023:3172-1 · Security update for the Linux Kernel

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867). - CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059). The following non-security bugs were fixed: - Dropped patch that caused issues with k3s (bsc#1213705). - ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices (git-fixes). - ASoC: SOF: topology: Fix logic for copying tuples (git-fixes). - Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (git-fixes). - Bluetooth: ISO: consider right CIS when removing CIG at cleanup (git-fixes). - Bluetooth: ISO: fix iso_conn related locking and validity issues (git-fixes). - Bluetooth: ISO: use hci_sync for setting CIG parameters (git-fixes). - Bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes). - Bluetooth: fix use-bdaddr-property quirk (git-fixes). - Bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes). - Bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes). - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes). - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (git-fixes). - Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758) - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (bsc#1212525). - PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() (git-fixes). - Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes) - Revert 'drm/i915: Disable DSB usage for now' (git-fixes). - USB: dwc2: Fix some error handling paths (git-fixes). - USB: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes). - USB: gadget: udc: core: Prevent soft_connect_store() race (git-fixes). - USB: typec: Fix fast_role_swap_current show function (git-fixes). - Update config and supported.conf files due to renaming. - acpi: Fix suspend with Xen PV (git-fixes). - adreno: Shutdown the GPU properly (git-fixes). - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes) - arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes) - arm64: vdso: Pass (void *) to virt_to_page() (git-fixes) - arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes) - can: bcm: Fix UAF in bcm_proc_show() (git-fixes). - ceph: add a dedicated private data for netfs rreq (bsc#1213205). - ceph: fix blindly expanding the readahead windows (bsc#1213206). - cifs: add a warning when the in-flight count goes negative (bsc#1193629). - cifs: address unused variable warning (bsc#1193629). - cifs: do all necessary checks for credits within or before locking (bsc#1193629). - cifs: fix lease break oops in xfstest generic/098 (bsc#1193629). - cifs: fix max_credits implementation (bsc#1193629). - cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629). - cifs: fix session state check in smb2_find_smb_ses (bsc#1193629). - cifs: fix session state transition to avoid use-after-free issue (bsc#1193629). - cifs: fix sockaddr comparison in iface_cmp (bsc#1193629). - cifs: fix status checks in cifs_tree_connect (bsc#1193629). - cifs: log session id when a matching ses is not found (bsc#1193629). - cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629). - cifs: prevent use-after-free by freeing the cfile later (bsc#1193629). - cifs: print all credit counters in DebugData (bsc#1193629). - cifs: print client_guid in DebugData (bsc#1193629). - cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629). - cifs: print nosharesock value while dumping mount options (bsc#1193629). - codel: fix kernel-doc notation warnings (git-fixes). - cpufreq: tegra194: Fix module loading (git-fixes). - devlink: fix kernel-doc notation warnings (git-fixes). - dma-buf/dma-resv: Stop leaking on krealloc() failure (git-fixes). - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes). - drm/amd/amdgpu: limit one queue per gang (git-fixes). - drm/amd/amdgpu: update mes11 api def (git-fixes). - drm/amd/display (gcc13): fix enum mismatch (git-fixes). - drm/amd/display: Add Z8 allow states to z-state support list (git-fixes). - drm/amd/display: Add debug option to skip PSR CRTC disable (git-fixes). - drm/amd/display: Add minimum Z8 residency debug option (git-fixes). - drm/amd/display: Add missing WA and MCLK validation (git-fixes). - drm/amd/display: Change default Z8 watermark values (git-fixes). - drm/amd/display: Correct DML calculation to align HW formula (git-fixes). - drm/amd/display: Correct DML calculation to follow HW SPEC (git-fixes). - drm/amd/display: Do not update DRR while BW optimizations pending (git-fixes). - drm/amd/display: Enable HostVM based on rIOMMU active (git-fixes). - drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes (git-fixes). - drm/amd/display: Ensure vmin and vmax adjust for DCE (git-fixes). - drm/amd/display: Fix 4to1 MPC black screen with DPP RCO (git-fixes). - drm/amd/display: Fix Z8 support configurations (git-fixes). - drm/amd/display: Fix a test CalculatePrefetchSchedule() (git-fixes). - drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() (git-fixes). - drm/amd/display: Have Payload Properly Created After Resume (git-fixes). - drm/amd/display: Lowering min Z8 residency time (git-fixes). - drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes). - drm/amd/display: Refactor eDP PSR codes (git-fixes). - drm/amd/display: Remove FPU guards from the DML folder (git-fixes). - drm/amd/display: Remove optimization for VRR updates (git-fixes). - drm/amd/display: Remove stutter only configurations (git-fixes). - drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes). - drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes). - drm/amd/display: Update minimum stutter residency for DCN314 Z8 (git-fixes). - drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes). - drm/amd/display: fix PSR-SU/DSC interoperability support (git-fixes). - drm/amd/display: fix a divided-by-zero error (git-fixes). - drm/amd/display: fixed dcn30+ underflow issue (git-fixes). - drm/amd/display: limit timing for single dimm memory (git-fixes). - drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes). - drm/amd/display: set dcn315 lb bpp to 48 (git-fixes). - drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 (git-fixes). - drm/amd/pm: avoid potential UBSAN issue on legacy asics (git-fixes). - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs (git-fixes). - drm/amd/pm: fix possible power mode mismatch between driver and PMFW (git-fixes). - drm/amd/pm: resolve reboot exceptio

Correctif disponible

Publication

2023-08-03T06:36:45Z

Mise à jour

2025-05-02T04:34:27.608839Z

Pile logicielle: system

Vérifiez votre serveur →