SUSE-SU-2023:3392-1

Описание

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
• CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
• CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
• CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
• CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
• CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
• CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).
• CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
• CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586).
• CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
• CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).
• CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
• CVE-2023-4194: Fixed a type confusion in net tun_chr_open() bsc#1214019).

The following non-security bugs were fixed:

• arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).
• clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).
• clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).
• cpufeatures: allow adding more cpuid words
• get module prefix from kmod (bsc#1212835).
• kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ('rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps')
• kernel-docs: add buildrequires on python3-base when using python3 the python3 binary is provided by python3-base.
• kernel-docs: use python3 together with python3-sphinx (bsc#1212741).
• keys: change keyring_serialise_link_sem to a mutex (bsc#1207088).
• keys: fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).
• keys: hoist locking out of __key_link_begin() (bsc#1207088).
• net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).
• net: mana: add support for vlan tagging (bsc#1212301).
• readme.branch: add myself as co-maintainer
• remove more packaging cruft for sle < 12 sp3
• rpm/check-for-config-changes: ignore also pahole_has_* we now also have options like config_pahole_has_lang_exclude.
• rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*.
• timers: add shutdown mechanism to the internal functions (bsc#1213970).
• timers: provide timer_shutdown_sync (bsc#1213970).
• timers: rename del_timer() to timer_delete() (bsc#1213970).
• timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
• timers: replace bug_on()s (bsc#1213970).
• timers: silently ignore timers with a null function (bsc#1213970).
• timers: split [try_to_]del_timer_sync to prepare for shutdown mode (bsc#1213970).
• timers: update kernel-doc for various functions (bsc#1213970).
• timers: use del_timer_sync() even on up (bsc#1213970).
• ubi: ensure that vid header offset + vid header size <= alloc, size (bsc#1210584).
• ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).
• usrmerge: Adjust module path in the kernel sources (bsc#1212835).