Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:3391-1

Опубликовано: 23 авг. 2023
Источник: suse-cvrf

Описание

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
  • CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
  • CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
  • CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
  • CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
  • CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
  • CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).
  • CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).
  • CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).
  • CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).
  • CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
  • CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586).
  • CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
  • CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).
  • CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).

The following non-security bugs were fixed:

  • arm: cpu: switch to arch_cpu_finalize_init() (bsc#1206418).
  • block, bfq: fix division by zero error on zero wsum (bsc#1213653).
  • get module prefix from kmod (bsc#1212835).
  • init, x86: move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1206418).
  • init: invoke arch_cpu_finalize_init() earlier (bsc#1206418).
  • init: provide arch_cpu_finalize_init() (bsc#1206418).
  • init: remove check_bugs() leftovers (bsc#1206418).
  • jbd2: export jbd2_journal_[grab|put]_journal_head (bsc#1199304).
  • kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ('rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps')
  • kernel-docs: add buildrequires on python3-base when using python3 the python3 binary is provided by python3-base.
  • kernel-docs: use python3 together with python3-sphinx (bsc#1212741).
  • keys: do not cache key in task struct if key is requested from kernel thread (bsc#1213354).
  • lockdep: add preemption enabled/disabled assertion apis (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: add __always_inline annotation to __down_read_common() and inlined callers (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: always try to wake waiters in out_nolock path (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: better collate rwsem_read_trylock() (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: conditionally wake waiters in reader/writer slowpaths (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: disable preemption for spinning region (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: disable preemption in all down_read*() and up_read() code paths (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: disable preemption in all down_write*() and up_write() code paths (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: disable preemption while trying for rwsem lock (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: enable reader optimistic lock stealing (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: fix comment typo (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: fix comments about reader optimistic lock stealing conditions (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: fold _down{read,write}*() (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: introduce rwsem_write_trylock() (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: make handoff bit handling more consistent (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: no need to check for handoff bit if wait queue empty (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: optimize down_read_trylock() under highly contended case (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: pass the current atomic count to rwsem_down_read_slowpath() (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: prevent potential lock starvation (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: remove an unused parameter of rwsem_wake() (bsc#1207270 jsc#ped-4567).
  • locking/rwsem: remove reader optimistic spinning (bsc#1207270 jsc#ped-4567).
  • locking: add missing __sched attributes (bsc#1207270 jsc#ped-4567).
  • locking: remove rcu_read_{,un}lock() for preempt_{dis,en}able() (bsc#1207270 jsc#ped-4567).
  • net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).
  • net: mana: add support for vlan tagging (bsc#1212301).
  • ocfs2: fix a deadlock when commit trans (bsc#1199304).
  • ocfs2: fix defrag path triggering jbd2 assert (bsc#1199304).
  • ocfs2: fix race between searching chunks and release journal_head from buffer_head (bsc#1199304).
  • remove more packaging cruft for sle < 12 sp3
  • rpm/check-for-config-changes: ignore also pahole_has_* we now also have options like config_pahole_has_lang_exclude.
  • rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*.
  • rwsem: implement down_read_interruptible (bsc#1207270 jsc#ped-4567).
  • rwsem: implement down_read_killable_nested (bsc#1207270 jsc#ped-4567).
  • ubi: ensure that vid header offset + vid header size <= alloc, size (bsc#1210584).
  • ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).
  • usrmerge: adjust module path in the kernel sources (bsc#1212835).
  • x86/cpu: switch to arch_cpu_finalize_init() (bsc#1206418).
  • x86/fpu: remove cpuinfo argument from init functions (bsc#1206418).
  • x86/microcode/AMD: Make stub function static inline (bsc#1213868).

Список пакетов

Container suse/sle-micro-rancher/5.2:latest
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-CHOST-BYOS-Aliyun
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-CHOST-BYOS-Azure
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-CHOST-BYOS-EC2
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-CHOST-BYOS-GCE
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-CHOST-BYOS-SAP-CCloud
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-HPC-BYOS-Azure
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-HPC-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-HPC-BYOS-GCE
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-Micro-5-1-BYOS-Azure
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-Micro-5-1-BYOS-GCE
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-Micro-5-2-BYOS-Azure
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-Micro-5-2-BYOS-GCE
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
cluster-md-kmp-default-5.3.18-150300.59.130.1
dlm-kmp-default-5.3.18-150300.59.130.1
gfs2-kmp-default-5.3.18-150300.59.130.1
kernel-default-5.3.18-150300.59.130.1
ocfs2-kmp-default-5.3.18-150300.59.130.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
cluster-md-kmp-default-5.3.18-150300.59.130.1
dlm-kmp-default-5.3.18-150300.59.130.1
gfs2-kmp-default-5.3.18-150300.59.130.1
kernel-default-5.3.18-150300.59.130.1
ocfs2-kmp-default-5.3.18-150300.59.130.1
Image SLES15-SP3-SAP-BYOS-Azure
cluster-md-kmp-default-5.3.18-150300.59.130.1
dlm-kmp-default-5.3.18-150300.59.130.1
gfs2-kmp-default-5.3.18-150300.59.130.1
kernel-default-5.3.18-150300.59.130.1
ocfs2-kmp-default-5.3.18-150300.59.130.1
Image SLES15-SP3-SAP-BYOS-EC2-HVM
cluster-md-kmp-default-5.3.18-150300.59.130.1
dlm-kmp-default-5.3.18-150300.59.130.1
gfs2-kmp-default-5.3.18-150300.59.130.1
kernel-default-5.3.18-150300.59.130.1
ocfs2-kmp-default-5.3.18-150300.59.130.1
Image SLES15-SP3-SAP-BYOS-GCE
cluster-md-kmp-default-5.3.18-150300.59.130.1
dlm-kmp-default-5.3.18-150300.59.130.1
gfs2-kmp-default-5.3.18-150300.59.130.1
kernel-default-5.3.18-150300.59.130.1
ocfs2-kmp-default-5.3.18-150300.59.130.1
Image SLES15-SP3-SAPCAL-Azure
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-SAPCAL-EC2-HVM
kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-SAPCAL-GCE
kernel-default-5.3.18-150300.59.130.1
SUSE Enterprise Storage 7.1
kernel-64kb-5.3.18-150300.59.130.1
kernel-64kb-devel-5.3.18-150300.59.130.1
kernel-default-5.3.18-150300.59.130.1
kernel-default-base-5.3.18-150300.59.130.1.150300.18.76.1
kernel-default-devel-5.3.18-150300.59.130.1
kernel-devel-5.3.18-150300.59.130.1
kernel-docs-5.3.18-150300.59.130.1
kernel-macros-5.3.18-150300.59.130.1
kernel-obs-build-5.3.18-150300.59.130.1
kernel-preempt-5.3.18-150300.59.130.1
kernel-preempt-devel-5.3.18-150300.59.130.1
kernel-source-5.3.18-150300.59.130.1
kernel-syms-5.3.18-150300.59.130.1
reiserfs-kmp-default-5.3.18-150300.59.130.1
SUSE Linux Enterprise High Availability Extension 15 SP3
cluster-md-kmp-default-5.3.18-150300.59.130.1
dlm-kmp-default-5.3.18-150300.59.130.1
gfs2-kmp-default-5.3.18-150300.59.130.1
ocfs2-kmp-default-5.3.18-150300.59.130.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
kernel-64kb-5.3.18-150300.59.130.1
kernel-64kb-devel-5.3.18-150300.59.130.1
kernel-default-5.3.18-150300.59.130.1
kernel-default-base-5.3.18-150300.59.130.1.150300.18.76.1
kernel-default-devel-5.3.18-150300.59.130.1
kernel-devel-5.3.18-150300.59.130.1
kernel-docs-5.3.18-150300.59.130.1
kernel-macros-5.3.18-150300.59.130.1
kernel-obs-build-5.3.18-150300.59.130.1
kernel-preempt-5.3.18-150300.59.130.1
kernel-preempt-devel-5.3.18-150300.59.130.1
kernel-source-5.3.18-150300.59.130.1
kernel-syms-5.3.18-150300.59.130.1
reiserfs-kmp-default-5.3.18-150300.59.130.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
kernel-64kb-5.3.18-150300.59.130.1
kernel-64kb-devel-5.3.18-150300.59.130.1
kernel-default-5.3.18-150300.59.130.1
kernel-default-base-5.3.18-150300.59.130.1.150300.18.76.1
kernel-default-devel-5.3.18-150300.59.130.1
kernel-devel-5.3.18-150300.59.130.1
kernel-docs-5.3.18-150300.59.130.1
kernel-macros-5.3.18-150300.59.130.1
kernel-obs-build-5.3.18-150300.59.130.1
kernel-preempt-5.3.18-150300.59.130.1
kernel-preempt-devel-5.3.18-150300.59.130.1
kernel-source-5.3.18-150300.59.130.1
kernel-syms-5.3.18-150300.59.130.1
reiserfs-kmp-default-5.3.18-150300.59.130.1
SUSE Linux Enterprise Live Patching 15 SP3
kernel-default-livepatch-5.3.18-150300.59.130.1
kernel-default-livepatch-devel-5.3.18-150300.59.130.1
kernel-livepatch-5_3_18-150300_59_130-default-1-150300.7.3.1
SUSE Linux Enterprise Micro 5.1
kernel-default-5.3.18-150300.59.130.1
kernel-default-base-5.3.18-150300.59.130.1.150300.18.76.1
SUSE Linux Enterprise Micro 5.2
kernel-default-5.3.18-150300.59.130.1
kernel-default-base-5.3.18-150300.59.130.1.150300.18.76.1
SUSE Linux Enterprise Server 15 SP3-LTSS
kernel-64kb-5.3.18-150300.59.130.1
kernel-64kb-devel-5.3.18-150300.59.130.1
kernel-default-5.3.18-150300.59.130.1
kernel-default-base-5.3.18-150300.59.130.1.150300.18.76.1
kernel-default-devel-5.3.18-150300.59.130.1
kernel-devel-5.3.18-150300.59.130.1
kernel-docs-5.3.18-150300.59.130.1
kernel-macros-5.3.18-150300.59.130.1
kernel-obs-build-5.3.18-150300.59.130.1
kernel-preempt-5.3.18-150300.59.130.1
kernel-preempt-devel-5.3.18-150300.59.130.1
kernel-source-5.3.18-150300.59.130.1
kernel-syms-5.3.18-150300.59.130.1
kernel-zfcpdump-5.3.18-150300.59.130.1
reiserfs-kmp-default-5.3.18-150300.59.130.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
kernel-default-5.3.18-150300.59.130.1
kernel-default-base-5.3.18-150300.59.130.1.150300.18.76.1
kernel-default-devel-5.3.18-150300.59.130.1
kernel-devel-5.3.18-150300.59.130.1
kernel-docs-5.3.18-150300.59.130.1
kernel-macros-5.3.18-150300.59.130.1
kernel-obs-build-5.3.18-150300.59.130.1
kernel-preempt-5.3.18-150300.59.130.1
kernel-preempt-devel-5.3.18-150300.59.130.1
kernel-source-5.3.18-150300.59.130.1
kernel-syms-5.3.18-150300.59.130.1
reiserfs-kmp-default-5.3.18-150300.59.130.1
SUSE Manager Proxy 4.2
kernel-default-5.3.18-150300.59.130.1
kernel-default-base-5.3.18-150300.59.130.1.150300.18.76.1
kernel-default-devel-5.3.18-150300.59.130.1
kernel-devel-5.3.18-150300.59.130.1
kernel-macros-5.3.18-150300.59.130.1
kernel-preempt-5.3.18-150300.59.130.1
SUSE Manager Server 4.2
kernel-default-5.3.18-150300.59.130.1
kernel-default-base-5.3.18-150300.59.130.1.150300.18.76.1
kernel-default-devel-5.3.18-150300.59.130.1
kernel-devel-5.3.18-150300.59.130.1
kernel-macros-5.3.18-150300.59.130.1
kernel-preempt-5.3.18-150300.59.130.1
kernel-zfcpdump-5.3.18-150300.59.130.1
openSUSE Leap 15.4
dtb-al-5.3.18-150300.59.130.1
dtb-zte-5.3.18-150300.59.130.1

Ссылки

Описание

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

An issue in "Zen 2" CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial of service problem.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

** REJECT ** Duplicate of CVE-2023-3390.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue. We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки

Описание

An out-of-bounds memory access flaw was found in the Linux kernel's TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.130.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.130.1
Ссылки
Уязвимость SUSE-SU-2023:3391-1