SUSE-SU-2024:0160-1

SUSE-SU-2024:0160-1 · Security update for the Linux Kernel

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN (bsc#1179610 bsc#1215237). - CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559). - CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250). - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447). - CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1218335). - CVE-2023-6606: Fixed an out-of-bounds read vulnerability in smbCalcSize in fs/smb/client/netmisc.c that could allow a local attacker to crash the system or leak internal kernel information (bsc#1217947). - CVE-2023-6610: Fixed an out-of-bounds read vulnerability in smb2_dump_detail in fs/smb/client/smb2ops.c that could allow a local attacker to crash the system or leak internal kernel information (bsc#1217946). - CVE-2023-6622: Fixed a null pointer dereference vulnerability in nft_dynset_init() that could allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service (bsc#1217938). - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258). - CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253). The following non-security bugs were fixed: - Documentation: KVM: add separate directories for architecture-specific documentation (jsc#PED-7167). - Documentation: KVM: update amd-memory-encryption.rst references (jsc#PED-7167). - Documentation: KVM: update msr.rst reference (jsc#PED-7167). - Documentation: KVM: update s390-diag.rst reference (jsc#PED-7167). - Documentation: KVM: update s390-pv.rst reference (jsc#PED-7167). - Documentation: drop more IDE boot options and ide-cd.rst (git-fixes). - Documentation: qat: Use code block for qat sysfs example (git-fixes). - Drop Documentation/ide/ (git-fixes). - Fix crash in vmw_context_cotables_unref when 3d support is enabled (bsc#1218738) - Fix crash on screen resize (bsc#1218229) - Fix drm gem object underflow (bsc#1218092) - Revert 'PCI/ASPM: Remove pcie_aspm_pm_state_change()' (git-fixes). - Revert 'PCI: acpiphp: Reassign resources on bridge if necessary' (git-fixes). - Revert 'md: unlock mddev before reap sync_thread in action_store' (git-fixes). - Revert 'swiotlb: panic if nslabs is too small' (git-fixes). - Revert 'xhci: Loosen RPM as default policy to cover for AMD xHC 1.1' (git-fixes). - Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces - acpi: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (git-fixes). - acpi: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects (git-fixes). - acpica: Add AML_NO_OPERAND_RESOLVE flag to Timer (git-fixes). - afs: Fix afs_server_list to be cleaned up with RCU (git-fixes). - afs: Fix dynamic root lookup DNS check (git-fixes). - afs: Fix file locking on R/O volumes to operate in local mode (git-fixes). - afs: Fix overwriting of result of DNS query (git-fixes). - afs: Fix refcount underflow from error handling race (git-fixes). - afs: Fix the dynamic root's d_delete to always delete unused dentries (git-fixes). - afs: Fix use-after-free due to get/remove race in volume tree (git-fixes). - afs: Make error on cell lookup failure consistent with OpenAFS (git-fixes). - afs: Return ENOENT if no cell DNS record can be found (git-fixes). - alsa: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro (git-fixes). - alsa: hda/hdmi: add force-connect quirk for NUC5CPYB (git-fixes). - alsa: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants (git-fixes). - alsa: hda/realtek: Add Framework laptop 16 to quirks (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GV302XA (git-fixes). - alsa: hda/realtek: Add supported ALC257 for ChromeOS (git-fixes). - alsa: hda/realtek: Apply mute LED quirk for HP15-db (git-fixes). - alsa: hda/realtek: Enable headset on Lenovo M90 Gen5 (git-fixes). - alsa: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 (git-fixes). - alsa: hda/realtek: Headset Mic VREF to 100% (git-fixes). - alsa: hda/realtek: add new Framework laptop to quirks (git-fixes). - alsa: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs for a HP ZBook (git-fixes). - alsa: hda/realtek: fix speakers on XPS 9530 (2023) (git-fixes). - alsa: hda: intel-dsp-cfg: add LunarLake support (git-fixes). - alsa: pcm: fix out-of-bounds in snd_pcm_state_names (git-fixes). - alsa: seq: oss: Fix racy open/close of MIDI devices (git-fixes). - alsa: usb-audio: Add Pioneer DJM-450 mixer controls (git-fixes). - alsa: usb-audio: Increase delay in MOTU M quirk (git-fixes). - apparmor: Free up __cleanup() name (jsc#PED-7167). - arm64: dts: arm: add missing cache properties (git-fixes) - arm64: dts: imx8mm: Add sound-dai-cells to micfil node (git-fixes) - arm64: dts: imx8mn: Add sound-dai-cells to micfil node (git-fixes) - arm64: dts: imx8mq-librem5: Remove dis_u3_susphy_quirk from (git-fixes) - arm64: kdump: Skip kmemleak scan reserved memory for kdump (jsc#PED-7167). - arm64: mm: Fix 'rodata=on' when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y (git-fixes) - arm: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init (git-fixes). - arm: PL011: Fix DMA support (git-fixes). - asoc: fsl_rpmsg: Fix error handler with pm_runtime_enable (git-fixes). - asoc: hdmi-codec: fix missing report for jack initial status (git-fixes). - asoc: meson: g12a-toacodec: Fix event generation (git-fixes). - asoc: meson: g12a-toacodec: Validate written enum values (git-fixes). - asoc: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux (git-fixes). - asoc: meson: g12a-tohdmitx: Validate written enum values (git-fixes). - asoc: wm_adsp: fix memleak in wm_adsp_buffer_populate (git-fixes). - bitmap: unify find_bit operations (jsc#PED-7167). - block: fix revalidate performance regression (bsc#1216057). - bluetooth: Fix deadlock in vhci_send_frame (git-fixes). - bluetooth: L2CAP: Send reject on command corrupted request (git-fixes). - bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE (git-fixes). - bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921 (bsc#1218461). - bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (git-fixes). - bluetooth: hci_event: shut up a false-positive warning (git-fixes). - bluetooth: hci_qca: Fix the teardown problem for real (git-fixes). - bnxt: do not handle XDP in netpoll (jsc#PED-1495). - bnxt_en: Clear resource reservation during resume (jsc#PED-1495). - bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic (jsc#PED-1495). - bnxt_en: Fix max_mtu setting for multi-buf XDP (jsc#PED-1495). - bnxt_en: Fix page pool logic for page size >= 64K (jsc#PED-1495). - bnxt_en: Fix wrong return value check in bnxt_close_nic() (jsc#PED-1495). - bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI (jsc#PED-1495). - bpf: Adjust insufficient default bpf_jit_limit (bsc#1218234 git-fixes). - bus: ti-sysc: Flush posted write only after srst_udelay (git-fixes). - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1217980). - ceph: fix type promotion bug on 32bit systems (bsc#1217982). - cleanup: Make no_free_ptr() __must_check (jsc#PED-7167). - clocksource:

Correctif disponible

Publication

2024-01-18T17:04:28Z

Mise à jour

2026-02-04T03:50:42.822944Z

Pile logicielle: system

Vérifiez votre serveur →