SUSE-SU-2023:3705-1

SUSE-SU-2023:3705-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517). - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546). - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233). - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149). - CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a local user to crash the system, causing a denial of service condition (bsc#1213969). - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970). - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971). - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019). - CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check (bsc#1214348). - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350). - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451). The following non-security bugs were fixed: - af_key: fix send_acquire race with pfkey_register (git-fixes). - af_packet: fix data-race in packet_setsockopt / packet_setsockopt (git-fixes). - af_unix: fix a data race of sk->sk_receive_queue->qlen (git-fixes). - arm64: re-enable support for contiguous hugepages (git-fixes) - arm64: vdso: fix clock_getres() for clock_realtime (git-fixes) - arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970). - bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes). - bnx2x: fix page fault following eeh recovery (bsc#1214299). - bonding: fix a use-after-free problem when bond_sysfs_slave_add() failed (git-fixes). - bpf, arm64: remove prefetch insn in xadd mapping (git-fixes) - bpf, arm64: use more scalable stadd over ldxr / stxr loop in xadd (git-fixes) - bridge: ebtables: do not crash when using dnat target in output chains (git-fixes). - btrfs-allow-use-of-global-block-reserve-for-balance (bsc#1214335). - btrfs-unset-reloc-control-if-transaction-commit-fail (bsc#1212051). - clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970). - fs/sysv: null check to prevent null-ptr-deref bug (git-fixes). - fs: hfsplus: remove warn_on() from hfsplus_cat_{read,write}_inode() (git-fixes). - fs: lockd: avoid possible wrong null parameter (git-fixes). - inetpeer: fix data-race in inet_putpeer / inet_putpeer (git-fixes). - kabi/severities: ignore newly added srso mitigation functions - libceph: fix potential hang in ceph_osdc_notify() (bsc#1214752). - module: avoid allocation if module is already present and ready (bsc#1213921). - module: extract patient module check into helper (bsc#1213921). - module: move check_modinfo() early to early_mod_check() (bsc#1213921). - module: move early sanity checks into a helper (bsc#1213921). - net-sysfs: call dev_hold always in netdev_queue_add_kobject (git-fixes). - net-sysfs: call dev_hold always in rx_queue_add_kobject (git-fixes). - net-sysfs: fix netdev_queue_add_kobject() breakage (git-fixes). - net-sysfs: fix reference count leak in rx|netdev_queue_add_kobject (git-fixes). - net/af_unix: fix a data-race in unix_dgram_poll (git-fixes). - net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock (git-fixes). - net/fq_impl: switch to kvmalloc() for memory allocation (git-fixes). - net: bnx2x: fix variable dereferenced before check (git-fixes). - net: icmp: fix data-race in cmp_global_allow() (git-fixes). - net: mana: add support for xdp_query_prog (jsc#sle-18779, bsc#1214209). - net: usb: qmi_wwan: add support for compal rxm-g1 (git-fixes). - netfilter: ipset: fix an error code in ip_set_sockfn_get() (git-fixes). - netfilter: nf_conntrack: fix possible possible crash on module loading (git-fixes). - nfs/blocklayout: use the passed in gfp flags (git-fixes). - nfs: guard against readdir loop when entry names exceed maxnamelen (git-fixes). - nfsd: add encoding of op_recall flag for write delegation (git-fixes). - nfsd: da_addr_body field missing in some getdeviceinfo replies (git-fixes). - nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes). - packet: fix data-race in fanout_flow_is_huge() (git-fixes). - packet: unconditionally free po->rollover (git-fixes). - powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes). - revert 'scsi: qla2xxx: fix buffer overrun' (bsc#1214928). - ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes). - ring-buffer: fix wrong stat of cpu_buffer->read (git-fixes). - s390/cio: cio_ignore_proc_seq_next should increase position index (git-fixes bsc#1215057). - s390/cpum_sf: avoid sbd overflow condition in irq handler (git-fixes bsc#1213908). - s390/cpum_sf: check for sdbt and sdb consistency (git-fixes bsc#1213910). - s390/dasd/cio: interpret ccw_device_get_mdc return value correctly (git-fixes bsc#1215049). - s390/dasd: fix capacity calculation for large volumes (git-fixes bsc#1215034). - s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1214157). - s390/ftrace: fix endless recursion in function_graph tracer (git-fixes bsc#1213912). - s390/jump_label: print real address in a case of a jump label bug (git-fixes bsc#1213899). - s390/kasan: fix strncpy_from_user kasan checks (git-fixes bsc#1215037). - s390/kdump: fix memleak in nt_vmcoreinfo (git-fixes bsc#1215028). - s390/pkey: add one more argument space for debug feature entry (git-fixes bsc#1215035). - s390/qdio: add sanity checks to the fast-requeue path (git-fixes bsc#1215038). - s390/smp: __smp_rescan_cpus() - move cpumask away from stack (git-fixes bsc#1213906). - s390/smp: fix physical to logical cpu map for smt (git-fixes bsc#1213904). - s390/time: ensure get_clock_monotonic() returns monotonic values (git-fixes bsc#1213911). - s390/uaccess: avoid (false positive) compiler warnings (git-fixes bsc#1215041). - s390/zcrypt: handle new reply code filtered_by_hypervisor (git-fixes bsc#1215046). - s390/zcrypt: improve special ap message cmd handling (git-fixes bsc#1215032). - s390: zcrypt: initialize variables before_use (git-fixes bsc#1215036). - sched/core: check quota and peri

Fix available

Published

2023-09-20T11:31:39Z

Updated

2025-05-02T04:33:28.624769Z

Stack: system

Check your server →