Описание
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2023-39197: Fixed a out-of-bounds read in nf_conntrack_dccp_packet() (bsc#1216976).
- CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217332).
- CVE-2023-45863: Fixed a out-of-bounds write in fill_kobj_path() (bsc#1216058).
- CVE-2023-45871: Fixed an issue in the IGB driver, where the buffer size may not be adequate for frames larger than the MTU (bsc#1216259).
- CVE-2023-39198: Fixed a race condition leading to use-after-free in qxl_mode_dumb_create() (bsc#1216965).
- CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).
- CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216584).
The following non-security bugs were fixed:
- ALSA: hda: Disable power-save on KONTRON SinglePC (bsc#1217140).
- Call flush_delayed_fput() from nfsd main-loop (bsc#1217408).
- net: mana: Configure hwc timeout from hardware (bsc#1214037).
- net: mana: Fix MANA VF unload when hardware is unresponsive (bsc#1214764).
- powerpc: Do not clobber f0/vs0 during fp|altivec register save (bsc#1217780).
Список пакетов
Container suse/sle-micro-rancher/5.2:latest
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-Azure
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-GCE
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-CHOST-BYOS-Aliyun
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-CHOST-BYOS-Azure
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-CHOST-BYOS-EC2
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-CHOST-BYOS-GCE
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-CHOST-BYOS-SAP-CCloud
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-HPC-BYOS-Azure
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-HPC-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-HPC-BYOS-GCE
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-Micro-5-1-BYOS-Azure
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-Micro-5-1-BYOS-GCE
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-Micro-5-2-BYOS-Azure
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-Micro-5-2-BYOS-GCE
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
cluster-md-kmp-default-5.3.18-150300.59.144.1
dlm-kmp-default-5.3.18-150300.59.144.1
gfs2-kmp-default-5.3.18-150300.59.144.1
kernel-default-5.3.18-150300.59.144.1
ocfs2-kmp-default-5.3.18-150300.59.144.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
cluster-md-kmp-default-5.3.18-150300.59.144.1
dlm-kmp-default-5.3.18-150300.59.144.1
gfs2-kmp-default-5.3.18-150300.59.144.1
kernel-default-5.3.18-150300.59.144.1
ocfs2-kmp-default-5.3.18-150300.59.144.1
Image SLES15-SP3-SAP-BYOS-Azure
cluster-md-kmp-default-5.3.18-150300.59.144.1
dlm-kmp-default-5.3.18-150300.59.144.1
gfs2-kmp-default-5.3.18-150300.59.144.1
kernel-default-5.3.18-150300.59.144.1
ocfs2-kmp-default-5.3.18-150300.59.144.1
Image SLES15-SP3-SAP-BYOS-EC2-HVM
cluster-md-kmp-default-5.3.18-150300.59.144.1
dlm-kmp-default-5.3.18-150300.59.144.1
gfs2-kmp-default-5.3.18-150300.59.144.1
kernel-default-5.3.18-150300.59.144.1
ocfs2-kmp-default-5.3.18-150300.59.144.1
Image SLES15-SP3-SAP-BYOS-GCE
cluster-md-kmp-default-5.3.18-150300.59.144.1
dlm-kmp-default-5.3.18-150300.59.144.1
gfs2-kmp-default-5.3.18-150300.59.144.1
kernel-default-5.3.18-150300.59.144.1
ocfs2-kmp-default-5.3.18-150300.59.144.1
Image SLES15-SP3-SAPCAL-Azure
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-SAPCAL-EC2-HVM
kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-SAPCAL-GCE
kernel-default-5.3.18-150300.59.144.1
SUSE Enterprise Storage 7.1
kernel-64kb-5.3.18-150300.59.144.1
kernel-64kb-devel-5.3.18-150300.59.144.1
kernel-default-5.3.18-150300.59.144.1
kernel-default-base-5.3.18-150300.59.144.1.150300.18.84.1
kernel-default-devel-5.3.18-150300.59.144.1
kernel-devel-5.3.18-150300.59.144.1
kernel-docs-5.3.18-150300.59.144.1
kernel-macros-5.3.18-150300.59.144.1
kernel-obs-build-5.3.18-150300.59.144.1
kernel-preempt-5.3.18-150300.59.144.1
kernel-preempt-devel-5.3.18-150300.59.144.1
kernel-source-5.3.18-150300.59.144.1
kernel-syms-5.3.18-150300.59.144.1
reiserfs-kmp-default-5.3.18-150300.59.144.1
SUSE Linux Enterprise High Availability Extension 15 SP3
cluster-md-kmp-default-5.3.18-150300.59.144.1
dlm-kmp-default-5.3.18-150300.59.144.1
gfs2-kmp-default-5.3.18-150300.59.144.1
ocfs2-kmp-default-5.3.18-150300.59.144.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
kernel-64kb-5.3.18-150300.59.144.1
kernel-64kb-devel-5.3.18-150300.59.144.1
kernel-default-5.3.18-150300.59.144.1
kernel-default-base-5.3.18-150300.59.144.1.150300.18.84.1
kernel-default-devel-5.3.18-150300.59.144.1
kernel-devel-5.3.18-150300.59.144.1
kernel-docs-5.3.18-150300.59.144.1
kernel-macros-5.3.18-150300.59.144.1
kernel-obs-build-5.3.18-150300.59.144.1
kernel-preempt-5.3.18-150300.59.144.1
kernel-preempt-devel-5.3.18-150300.59.144.1
kernel-source-5.3.18-150300.59.144.1
kernel-syms-5.3.18-150300.59.144.1
reiserfs-kmp-default-5.3.18-150300.59.144.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
kernel-64kb-5.3.18-150300.59.144.1
kernel-64kb-devel-5.3.18-150300.59.144.1
kernel-default-5.3.18-150300.59.144.1
kernel-default-base-5.3.18-150300.59.144.1.150300.18.84.1
kernel-default-devel-5.3.18-150300.59.144.1
kernel-devel-5.3.18-150300.59.144.1
kernel-docs-5.3.18-150300.59.144.1
kernel-macros-5.3.18-150300.59.144.1
kernel-obs-build-5.3.18-150300.59.144.1
kernel-preempt-5.3.18-150300.59.144.1
kernel-preempt-devel-5.3.18-150300.59.144.1
kernel-source-5.3.18-150300.59.144.1
kernel-syms-5.3.18-150300.59.144.1
reiserfs-kmp-default-5.3.18-150300.59.144.1
SUSE Linux Enterprise Live Patching 15 SP3
kernel-default-livepatch-5.3.18-150300.59.144.1
kernel-default-livepatch-devel-5.3.18-150300.59.144.1
kernel-livepatch-5_3_18-150300_59_144-default-1-150300.7.3.1
SUSE Linux Enterprise Micro 5.1
kernel-default-5.3.18-150300.59.144.1
kernel-default-base-5.3.18-150300.59.144.1.150300.18.84.1
SUSE Linux Enterprise Micro 5.2
kernel-default-5.3.18-150300.59.144.1
kernel-default-base-5.3.18-150300.59.144.1.150300.18.84.1
SUSE Linux Enterprise Server 15 SP3-LTSS
kernel-64kb-5.3.18-150300.59.144.1
kernel-64kb-devel-5.3.18-150300.59.144.1
kernel-default-5.3.18-150300.59.144.1
kernel-default-base-5.3.18-150300.59.144.1.150300.18.84.1
kernel-default-devel-5.3.18-150300.59.144.1
kernel-devel-5.3.18-150300.59.144.1
kernel-docs-5.3.18-150300.59.144.1
kernel-macros-5.3.18-150300.59.144.1
kernel-obs-build-5.3.18-150300.59.144.1
kernel-preempt-5.3.18-150300.59.144.1
kernel-preempt-devel-5.3.18-150300.59.144.1
kernel-source-5.3.18-150300.59.144.1
kernel-syms-5.3.18-150300.59.144.1
kernel-zfcpdump-5.3.18-150300.59.144.1
reiserfs-kmp-default-5.3.18-150300.59.144.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
kernel-default-5.3.18-150300.59.144.1
kernel-default-base-5.3.18-150300.59.144.1.150300.18.84.1
kernel-default-devel-5.3.18-150300.59.144.1
kernel-devel-5.3.18-150300.59.144.1
kernel-docs-5.3.18-150300.59.144.1
kernel-macros-5.3.18-150300.59.144.1
kernel-obs-build-5.3.18-150300.59.144.1
kernel-preempt-5.3.18-150300.59.144.1
kernel-preempt-devel-5.3.18-150300.59.144.1
kernel-source-5.3.18-150300.59.144.1
kernel-syms-5.3.18-150300.59.144.1
reiserfs-kmp-default-5.3.18-150300.59.144.1
Ссылки
- Link for SUSE-SU-2023:4811-1
- E-Mail link for SUSE-SU-2023:4811-1
- SUSE Security Ratings
- SUSE Bug 1084909
- SUSE Bug 1210780
- SUSE Bug 1214037
- SUSE Bug 1214344
- SUSE Bug 1214764
- SUSE Bug 1215371
- SUSE Bug 1216058
- SUSE Bug 1216259
- SUSE Bug 1216584
- SUSE Bug 1216965
- SUSE Bug 1216976
- SUSE Bug 1217140
- SUSE Bug 1217332
- SUSE Bug 1217408
- SUSE Bug 1217780
- SUSE CVE CVE-2023-31083 page
- SUSE CVE CVE-2023-39197 page
Описание
An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu->proto is set. A NULL pointer dereference may occur.
Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.144.1
Ссылки
- CVE-2023-31083
- SUSE Bug 1210780
Описание
An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.
Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.144.1
Ссылки
- CVE-2023-39197
- SUSE Bug 1216976
- SUSE Bug 1220015
Описание
A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.
Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.144.1
Ссылки
- CVE-2023-39198
- SUSE Bug 1216965
- SUSE Bug 1217116
- SUSE Bug 1219703
Описание
An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write.
Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.144.1
Ссылки
- CVE-2023-45863
- SUSE Bug 1216058
- SUSE Bug 1220015
Описание
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.
Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.144.1
Ссылки
- CVE-2023-45871
- SUSE Bug 1216259
Описание
A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation. If perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer. We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.
Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.144.1
Ссылки
- CVE-2023-5717
- SUSE Bug 1216584
- SUSE Bug 1216644
- SUSE Bug 1217557
- SUSE Bug 1219697
- SUSE Bug 1220191
Описание
A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.
Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.144.1
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.144.1
Ссылки
- CVE-2023-6176
- SUSE Bug 1217332
- SUSE Bug 1217522