Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:2859-1

Опубликовано: 17 июл. 2023
Источник: suse-cvrf

Описание

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).
  • CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
  • CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
  • CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
  • CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
  • CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
  • CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
  • CVE-2023-3268: Fixed an out of bounds (OOB) memory access flaw in relay_file_read_start_pos in kernel/relay.c (bsc#1212502).
  • CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
  • CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504).
  • CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494).
  • CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).
  • CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513).

The following non-security bugs were fixed:

  • Also include kernel-docs build requirements for ALP
  • Avoid unsuported tar parameter on SLE12
  • Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
  • Fix usrmerge error (boo#1211796)
  • Generalize kernel-doc build requirements.
  • Move obsolete KMP list into a separate file. The list of obsoleted KMPs varies per release, move it out of the spec file.
  • Move setting %%build_html to config.sh
  • Move setting %%split_optional to config.sh
  • Move setting %%supported_modules_check to config.sh
  • Move the kernel-binary conflicts out of the spec file. Thie list of conflicting packages varies per release. To reduce merge conflicts move the list out of the spec file.
  • Remove obsolete rpm spec constructs defattr does not need to be specified anymore buildroot does not need to be specified anymore
  • Remove usrmerge compatibility symlink in buildroot (boo#1211796).
  • Trim obsolete KMP list. SLE11 is out of support, we do not need to handle upgrading from SLE11 SP1.
  • cifs: do not include page data when checking signature (bsc#1200217).
  • cifs: fix open leaks in open_cached_dir() (bsc#1209342).
  • google/gve:fix repeated words in comments (bsc#1211519).
  • gve: Adding a new AdminQ command to verify driver (bsc#1211519).
  • gve: Cache link_speed value from device (bsc#1211519).
  • gve: Fix GFP flags when allocing pages (bsc#1211519).
  • gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
  • gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519).
  • gve: Handle alternate miss completions (bsc#1211519).
  • gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
  • gve: Remove the code of clearing PBA bit (bsc#1211519).
  • gve: Secure enough bytes in the first TX desc for all TCP pkts (bsc#1211519).
  • gve: enhance no queue page list detection (bsc#1211519).
  • kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi
  • kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
  • kernel-source: Remove unused macro variant_symbols
  • kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731). rpm only supports full length release, no provides
  • rpm/check-for-config-changes: add TOOLCHAIN_NEEDS_* to IGNORED_CONFIGS_RE.
  • rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB
  • rpm/kernel-binary.spec.in: Add Provides of kernel-preempt (jsc#SLE-18857) For smooth migration with the former kernel-preempt user, kernel-default provides kernel-preempt now when CONFIG_PREEMPT_DYNAMIC is defined.
  • rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
  • rpm/kernel-binary.spec.in: Fix missing kernel-preempt-devel and KMP Provides (bsc#1199046)
  • rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
  • usrmerge: Compatibility with earlier rpm (boo#1211796)
  • x86/build: Avoid relocation information in final vmlinux (bsc#1187829).

Список пакетов

Container suse/sle-micro-rancher/5.2:latest
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-CHOST-BYOS-Aliyun
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-CHOST-BYOS-Azure
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-CHOST-BYOS-EC2
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-CHOST-BYOS-GCE
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-CHOST-BYOS-SAP-CCloud
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-HPC-BYOS-Azure
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-HPC-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-HPC-BYOS-GCE
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-Micro-5-1-BYOS-Azure
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-Micro-5-1-BYOS-GCE
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-Micro-5-2-BYOS-Azure
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-Micro-5-2-BYOS-GCE
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
cluster-md-kmp-default-5.3.18-150300.59.127.1
dlm-kmp-default-5.3.18-150300.59.127.1
gfs2-kmp-default-5.3.18-150300.59.127.1
kernel-default-5.3.18-150300.59.127.1
ocfs2-kmp-default-5.3.18-150300.59.127.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
cluster-md-kmp-default-5.3.18-150300.59.127.1
dlm-kmp-default-5.3.18-150300.59.127.1
gfs2-kmp-default-5.3.18-150300.59.127.1
kernel-default-5.3.18-150300.59.127.1
ocfs2-kmp-default-5.3.18-150300.59.127.1
Image SLES15-SP3-SAP-BYOS-Azure
cluster-md-kmp-default-5.3.18-150300.59.127.1
dlm-kmp-default-5.3.18-150300.59.127.1
gfs2-kmp-default-5.3.18-150300.59.127.1
kernel-default-5.3.18-150300.59.127.1
ocfs2-kmp-default-5.3.18-150300.59.127.1
Image SLES15-SP3-SAP-BYOS-EC2-HVM
cluster-md-kmp-default-5.3.18-150300.59.127.1
dlm-kmp-default-5.3.18-150300.59.127.1
gfs2-kmp-default-5.3.18-150300.59.127.1
kernel-default-5.3.18-150300.59.127.1
ocfs2-kmp-default-5.3.18-150300.59.127.1
Image SLES15-SP3-SAP-BYOS-GCE
cluster-md-kmp-default-5.3.18-150300.59.127.1
dlm-kmp-default-5.3.18-150300.59.127.1
gfs2-kmp-default-5.3.18-150300.59.127.1
kernel-default-5.3.18-150300.59.127.1
ocfs2-kmp-default-5.3.18-150300.59.127.1
Image SLES15-SP3-SAPCAL-Azure
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-SAPCAL-EC2-HVM
kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-SAPCAL-GCE
kernel-default-5.3.18-150300.59.127.1
SUSE Enterprise Storage 7.1
kernel-64kb-5.3.18-150300.59.127.1
kernel-64kb-devel-5.3.18-150300.59.127.1
kernel-default-5.3.18-150300.59.127.1
kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1
kernel-default-devel-5.3.18-150300.59.127.1
kernel-devel-5.3.18-150300.59.127.1
kernel-docs-5.3.18-150300.59.127.1
kernel-macros-5.3.18-150300.59.127.1
kernel-obs-build-5.3.18-150300.59.127.1
kernel-preempt-5.3.18-150300.59.127.1
kernel-preempt-devel-5.3.18-150300.59.127.1
kernel-source-5.3.18-150300.59.127.1
kernel-syms-5.3.18-150300.59.127.1
reiserfs-kmp-default-5.3.18-150300.59.127.1
SUSE Linux Enterprise High Availability Extension 15 SP3
cluster-md-kmp-default-5.3.18-150300.59.127.1
dlm-kmp-default-5.3.18-150300.59.127.1
gfs2-kmp-default-5.3.18-150300.59.127.1
ocfs2-kmp-default-5.3.18-150300.59.127.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
kernel-64kb-5.3.18-150300.59.127.1
kernel-64kb-devel-5.3.18-150300.59.127.1
kernel-default-5.3.18-150300.59.127.1
kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1
kernel-default-devel-5.3.18-150300.59.127.1
kernel-devel-5.3.18-150300.59.127.1
kernel-docs-5.3.18-150300.59.127.1
kernel-macros-5.3.18-150300.59.127.1
kernel-obs-build-5.3.18-150300.59.127.1
kernel-preempt-5.3.18-150300.59.127.1
kernel-preempt-devel-5.3.18-150300.59.127.1
kernel-source-5.3.18-150300.59.127.1
kernel-syms-5.3.18-150300.59.127.1
reiserfs-kmp-default-5.3.18-150300.59.127.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
kernel-64kb-5.3.18-150300.59.127.1
kernel-64kb-devel-5.3.18-150300.59.127.1
kernel-default-5.3.18-150300.59.127.1
kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1
kernel-default-devel-5.3.18-150300.59.127.1
kernel-devel-5.3.18-150300.59.127.1
kernel-docs-5.3.18-150300.59.127.1
kernel-macros-5.3.18-150300.59.127.1
kernel-obs-build-5.3.18-150300.59.127.1
kernel-preempt-5.3.18-150300.59.127.1
kernel-preempt-devel-5.3.18-150300.59.127.1
kernel-source-5.3.18-150300.59.127.1
kernel-syms-5.3.18-150300.59.127.1
reiserfs-kmp-default-5.3.18-150300.59.127.1
SUSE Linux Enterprise Live Patching 15 SP3
kernel-default-livepatch-5.3.18-150300.59.127.1
kernel-default-livepatch-devel-5.3.18-150300.59.127.1
kernel-livepatch-5_3_18-150300_59_127-default-1-150300.7.3.1
SUSE Linux Enterprise Micro 5.1
kernel-default-5.3.18-150300.59.127.1
kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1
SUSE Linux Enterprise Micro 5.2
kernel-default-5.3.18-150300.59.127.1
kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1
SUSE Linux Enterprise Real Time 15 SP3
kernel-default-5.3.18-150300.59.127.1
kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1
kernel-default-devel-5.3.18-150300.59.127.1
kernel-devel-5.3.18-150300.59.127.1
kernel-docs-5.3.18-150300.59.127.1
kernel-macros-5.3.18-150300.59.127.1
kernel-obs-build-5.3.18-150300.59.127.1
kernel-preempt-5.3.18-150300.59.127.1
kernel-preempt-devel-5.3.18-150300.59.127.1
kernel-source-5.3.18-150300.59.127.1
kernel-syms-5.3.18-150300.59.127.1
SUSE Linux Enterprise Server 15 SP3-LTSS
kernel-64kb-5.3.18-150300.59.127.1
kernel-64kb-devel-5.3.18-150300.59.127.1
kernel-default-5.3.18-150300.59.127.1
kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1
kernel-default-devel-5.3.18-150300.59.127.1
kernel-devel-5.3.18-150300.59.127.1
kernel-docs-5.3.18-150300.59.127.1
kernel-macros-5.3.18-150300.59.127.1
kernel-obs-build-5.3.18-150300.59.127.1
kernel-preempt-5.3.18-150300.59.127.1
kernel-preempt-devel-5.3.18-150300.59.127.1
kernel-source-5.3.18-150300.59.127.1
kernel-syms-5.3.18-150300.59.127.1
kernel-zfcpdump-5.3.18-150300.59.127.1
reiserfs-kmp-default-5.3.18-150300.59.127.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
kernel-default-5.3.18-150300.59.127.1
kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1
kernel-default-devel-5.3.18-150300.59.127.1
kernel-devel-5.3.18-150300.59.127.1
kernel-docs-5.3.18-150300.59.127.1
kernel-macros-5.3.18-150300.59.127.1
kernel-obs-build-5.3.18-150300.59.127.1
kernel-preempt-5.3.18-150300.59.127.1
kernel-preempt-devel-5.3.18-150300.59.127.1
kernel-source-5.3.18-150300.59.127.1
kernel-syms-5.3.18-150300.59.127.1
reiserfs-kmp-default-5.3.18-150300.59.127.1
SUSE Manager Proxy 4.2
kernel-default-5.3.18-150300.59.127.1
kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1
kernel-default-devel-5.3.18-150300.59.127.1
kernel-devel-5.3.18-150300.59.127.1
kernel-macros-5.3.18-150300.59.127.1
kernel-preempt-5.3.18-150300.59.127.1
SUSE Manager Server 4.2
kernel-default-5.3.18-150300.59.127.1
kernel-default-base-5.3.18-150300.59.127.1.150300.18.74.1
kernel-default-devel-5.3.18-150300.59.127.1
kernel-devel-5.3.18-150300.59.127.1
kernel-macros-5.3.18-150300.59.127.1
kernel-preempt-5.3.18-150300.59.127.1
kernel-zfcpdump-5.3.18-150300.59.127.1
openSUSE Leap 15.4
dtb-al-5.3.18-150300.59.127.1
dtb-zte-5.3.18-150300.59.127.1

Ссылки

Описание

In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки

Описание

A use-after-free flaw was found in the Linux kernel's core dump subsystem. This flaw allows a local user to crash the system. Only if patch 390031c94211 ("coredump: Use the vma snapshot in fill_files_note") not applied yet, then kernel could be affected.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки

Описание

A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки

Описание

A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled. We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки

Описание

A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки

Описание

A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queue_event() fails.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки

Описание

A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки

Описание

An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки

Описание

A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки

Описание

An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки

Описание

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки

Описание

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки

Описание

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.127.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.127.1
Ссылки
Уязвимость SUSE-SU-2023:2859-1