SUSE-SU-2023:2538-1

SUSE-SU-2023:2538-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806). - CVE-2022-3566: Fixed race condition in the TCP Handler (bsc#1204405). - CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760). - CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758). - CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762). - CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803). - CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756). - CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783). - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940). - CVE-2023-2194: Fixed an out-of-bounds write vulnerability in the SLIMpro I2C device driver (bsc#1210715). - CVE-2023-32269: Fixed a use-after-free in af_netrom.c, related to the fact that accept() was also allowed for a successfully connected AF_NETROM socket (bsc#1211186). - CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366). - CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287). - CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629). The following non-security bugs were fixed: - ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes). - Documentation: Document sysfs interfaces purr, spurr, idle_purr, idle_spurr (PED-3947 bsc#1210544 ltc#202303). - Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622). - IB/hfi1: Assign npages earlier (git-fixes) - IB/iser: bound protection_sg size by data_sg size (git-fixes) - IB/mlx4: Fix memory leaks (git-fixes) - IB/mlx4: Increase the timeout for CM cache (git-fixes) - IB/mlx5: Fix initializing CQ fragments buffer (git-fixes) - IB/rdmavt: Add __init/__exit annotations to module init/exit funcs (git-fixes) - IB/usnic: Fix potential deadlock (git-fixes) - KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1 (git-fixes). - KVM: x86: Update the exit_qualification access bits while walking an address (git-fixes). - KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing (git-fixes). - KVM: x86: emulator: em_sysexit should update ctxt->mode (git-fixes). - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (git-fixes). - KVM: x86: emulator: update the emulation mode after CR0 write (git-fixes). - KVM: x86: fix empty-body warnings (git-fixes). - KVM: x86: fix incorrect comparison in trace event (git-fixes). - KVM: x86: svm: report MSR_IA32_MCG_EXT_CTL as unsupported (git-fixes). - Move upstreamed media fixes into sorted section - PCI: Add ACS quirks for Cavium multi-function devices (git-fixes). - PCI: Call Max Payload Size-related fixup quirks early (git-fixes). - PCI: Mark Atheros QCA6174 to avoid bus reset (git-fixes). - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported (git-fixes). - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure (git-fixes). - PCI: aardvark: Configure PCIe resources from 'ranges' DT property (git-fixes). - PCI: aardvark: Fix PCIe Max Payload Size setting (git-fixes). - PCI: aardvark: Fix checking for PIO status (git-fixes). - PCI: aardvark: Fix masking and unmasking legacy INTx interrupts (git-fixes). - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response (git-fixes). - PCI: xilinx-nwl: Enable the clock through CCF (git-fixes). - RDMA/bnxt_re: Restrict the max_gids to 256 (git-fixes) - RDMA/cma: Do not change route.addr.src_addr.ss_family (git-fixes) - RDMA/cma: Fix rdma_resolve_route() memory leak (git-fixes) - RDMA/core: Do not access cm_id after its destruction (git-fixes) - RDMA/cxgb4: Fix missing error code in create_qp() (git-fixes) - RDMA/hfi1: Prevent panic when SDMA is disabled (git-fixes) - RDMA/hns: Bugfix for querying qkey (git-fixes) - RDMA/i40iw: Fix potential use after free (git-fixes) - RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()' (git-fixes) - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (git-fixes) - RDMA/mlx5: Block delay drop to unprivileged users (git-fixes) - RDMA/rxe: Fix error type of mmap_offset (git-fixes) - RDMA/srp: Move large values to a new enum for gcc13 (git-fixes) - RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer (git-fixes) - RDMA/usnic: fix set-but-not-unused variable 'flags' warning (git-fixes) - RDMa/mthca: Work around -Wenum-conversion warning (git-fixes) - RDS: IB: Fix null pointer issue (git-fixes). - USB: core: Add routines for endpoint checks in old drivers (git-fixes). - USB: sisusbvga: Add endpoint checks (git-fixes). - Update patch reference for libata fix (bsc#1118212). - adm8211: fix error return code in adm8211_probe() (git-fixes). - backlight: lm3630a: Fix return code of .update_status() callback (bsc#1129770) - blacklist.conf: workqueue: Cosmetic change. Not worth backporting (bsc#1211275) - bonding: show full hw address in sysfs for slave entries (git-fixes). - ceph: force updating the msg pointer in non-split case (bsc#1211801). - cpuidle/powernv: avoid double irq enable coming out of idle (PED-3947 bsc#1210544 ltc#202303). - cpuidle: powerpc: cpuidle set polling before enabling irqs (PED-3947 bsc#1210544 ltc#202303). - cpuidle: powerpc: no memory barrier after break from idle (PED-3947 bsc#1210544 ltc#202303). - cpuidle: powerpc: read mostly for common globals (PED-3947 bsc#1210544 ltc#202303). - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878). - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes). - fbcon: Check font dimension limits (bsc#1154048) - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (bsc#1154048) - fix kcm_clone() (git-fixes). - fotg210-udc: Add missing completion handler (git-fixes). - ip6_tunnel: allow ip6gre dev mtu to be set below 1280 (git-fixes). - ip6_tunnel: fix IFLA_MTU ignored on NEWLINK (git-fixes). - ipoib: correcly show a VF hardware address (git-fixes) - ipv4: ipv4_default_advmss() should use route mtu (git-fixes). - ipv6: Reinject IPv6 packets if IPsec policy matches after SNAT (git-fixes). - ipv6: icmp6: Allow icmp messages to be looped back (git-fixes). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - kcm: Check if sk_user_data already set in kcm_attach (git-fixes). - kvm: mmu: Do not read PDPTEs when paging is not enabled (git-fixes). - l2tp: remove configurable payload offset (git-fixes). - l2tp: remove l2specific_len dependency in l2tp_core (git-fixes). - libata: add horkage for ASMedia 1092 (git-fixes). - mac80211: choose first enabled channel for monitor (git-fixes). - mac80211: drop multicast fragments (git-fixes). - mac80211: fix fast-rx encryption check (git-fixes). - mac80211: pause TX while changing interface type (git-fixes). - media: radio-shark: Add endpoint checks (git-fixes). - mlx4: Use snprintf instead of complicated strcpy (git-fixes) - mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes). - net/iucv: Fix size of interrupt data (bsc#1211466). - net/mlx4_core: Fix return codes of unsupported operations (git-fixes). - net/tcp/illinois: replace broken algorithm referenc

Fix available

Published

2023-06-19T07:56:30Z

Updated

2026-02-04T04:41:01.652225Z

Stack: system

Check your server →