Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:0153-1

Опубликовано: 18 янв. 2024
Источник: suse-cvrf

Описание

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN (bsc#1179610 bsc#1215237).
  • CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559).
  • CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250).
  • CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947).
  • CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946).
  • CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258).
  • CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253).

The following non-security bugs were fixed:

  • clocksource: Avoid accidental unstable marking of clocksources (bsc#1218105).
  • clocksource: Suspend the watchdog temporarily when high read latency detected (bsc#1218105).
  • doc/README.SUSE: Add how to update the config for module signing (jsc#PED-5021)
  • doc/README.SUSE: Remove how to build modules using kernel-source (jsc#PED-5021)
  • doc/README.SUSE: Simplify the list of references (jsc#PED-5021).
  • efi/mokvar: Reserve the table only if it is in boot services data (bsc#1215375).
  • io_uring: fix 32-bit compatability with sendmsg/recvmsg (bsc#1217709).

Список пакетов

Container suse/sle-micro-rancher/5.2:latest
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-Azure
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-GCE
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-CHOST-BYOS-Aliyun
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-CHOST-BYOS-Azure
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-CHOST-BYOS-EC2
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-CHOST-BYOS-GCE
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-CHOST-BYOS-SAP-CCloud
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-HPC-BYOS-Azure
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-HPC-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-HPC-BYOS-GCE
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-Micro-5-1-BYOS-Azure
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-Micro-5-1-BYOS-GCE
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-Micro-5-2-BYOS-Azure
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-Micro-5-2-BYOS-GCE
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
cluster-md-kmp-default-5.3.18-150300.59.147.2
dlm-kmp-default-5.3.18-150300.59.147.2
gfs2-kmp-default-5.3.18-150300.59.147.2
kernel-default-5.3.18-150300.59.147.2
ocfs2-kmp-default-5.3.18-150300.59.147.2
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
cluster-md-kmp-default-5.3.18-150300.59.147.2
dlm-kmp-default-5.3.18-150300.59.147.2
gfs2-kmp-default-5.3.18-150300.59.147.2
kernel-default-5.3.18-150300.59.147.2
ocfs2-kmp-default-5.3.18-150300.59.147.2
Image SLES15-SP3-SAP-BYOS-Azure
cluster-md-kmp-default-5.3.18-150300.59.147.2
dlm-kmp-default-5.3.18-150300.59.147.2
gfs2-kmp-default-5.3.18-150300.59.147.2
kernel-default-5.3.18-150300.59.147.2
ocfs2-kmp-default-5.3.18-150300.59.147.2
Image SLES15-SP3-SAP-BYOS-EC2-HVM
cluster-md-kmp-default-5.3.18-150300.59.147.2
dlm-kmp-default-5.3.18-150300.59.147.2
gfs2-kmp-default-5.3.18-150300.59.147.2
kernel-default-5.3.18-150300.59.147.2
ocfs2-kmp-default-5.3.18-150300.59.147.2
Image SLES15-SP3-SAP-BYOS-GCE
cluster-md-kmp-default-5.3.18-150300.59.147.2
dlm-kmp-default-5.3.18-150300.59.147.2
gfs2-kmp-default-5.3.18-150300.59.147.2
kernel-default-5.3.18-150300.59.147.2
ocfs2-kmp-default-5.3.18-150300.59.147.2
Image SLES15-SP3-SAPCAL-Azure
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-SAPCAL-EC2-HVM
kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-SAPCAL-GCE
kernel-default-5.3.18-150300.59.147.2
SUSE Enterprise Storage 7.1
kernel-64kb-5.3.18-150300.59.147.2
kernel-64kb-devel-5.3.18-150300.59.147.2
kernel-default-5.3.18-150300.59.147.2
kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
kernel-default-devel-5.3.18-150300.59.147.2
kernel-devel-5.3.18-150300.59.147.1
kernel-docs-5.3.18-150300.59.147.1
kernel-macros-5.3.18-150300.59.147.1
kernel-obs-build-5.3.18-150300.59.147.2
kernel-preempt-5.3.18-150300.59.147.2
kernel-preempt-devel-5.3.18-150300.59.147.2
kernel-source-5.3.18-150300.59.147.1
kernel-syms-5.3.18-150300.59.147.1
reiserfs-kmp-default-5.3.18-150300.59.147.2
SUSE Linux Enterprise High Availability Extension 15 SP3
cluster-md-kmp-default-5.3.18-150300.59.147.2
dlm-kmp-default-5.3.18-150300.59.147.2
gfs2-kmp-default-5.3.18-150300.59.147.2
ocfs2-kmp-default-5.3.18-150300.59.147.2
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
kernel-64kb-5.3.18-150300.59.147.2
kernel-64kb-devel-5.3.18-150300.59.147.2
kernel-default-5.3.18-150300.59.147.2
kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
kernel-default-devel-5.3.18-150300.59.147.2
kernel-devel-5.3.18-150300.59.147.1
kernel-docs-5.3.18-150300.59.147.1
kernel-macros-5.3.18-150300.59.147.1
kernel-obs-build-5.3.18-150300.59.147.2
kernel-preempt-5.3.18-150300.59.147.2
kernel-preempt-devel-5.3.18-150300.59.147.2
kernel-source-5.3.18-150300.59.147.1
kernel-syms-5.3.18-150300.59.147.1
reiserfs-kmp-default-5.3.18-150300.59.147.2
SUSE Linux Enterprise Live Patching 15 SP3
kernel-default-livepatch-5.3.18-150300.59.147.2
kernel-default-livepatch-devel-5.3.18-150300.59.147.2
kernel-livepatch-5_3_18-150300_59_147-default-1-150300.7.3.2
SUSE Linux Enterprise Micro 5.1
kernel-default-5.3.18-150300.59.147.2
kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
SUSE Linux Enterprise Micro 5.2
kernel-default-5.3.18-150300.59.147.2
kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
SUSE Linux Enterprise Server 15 SP3-LTSS
kernel-64kb-5.3.18-150300.59.147.2
kernel-64kb-devel-5.3.18-150300.59.147.2
kernel-default-5.3.18-150300.59.147.2
kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
kernel-default-devel-5.3.18-150300.59.147.2
kernel-devel-5.3.18-150300.59.147.1
kernel-docs-5.3.18-150300.59.147.1
kernel-macros-5.3.18-150300.59.147.1
kernel-obs-build-5.3.18-150300.59.147.2
kernel-preempt-5.3.18-150300.59.147.2
kernel-preempt-devel-5.3.18-150300.59.147.2
kernel-source-5.3.18-150300.59.147.1
kernel-syms-5.3.18-150300.59.147.1
kernel-zfcpdump-5.3.18-150300.59.147.1
reiserfs-kmp-default-5.3.18-150300.59.147.2
SUSE Linux Enterprise Server for SAP Applications 15 SP3
kernel-default-5.3.18-150300.59.147.2
kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
kernel-default-devel-5.3.18-150300.59.147.2
kernel-devel-5.3.18-150300.59.147.1
kernel-docs-5.3.18-150300.59.147.1
kernel-macros-5.3.18-150300.59.147.1
kernel-obs-build-5.3.18-150300.59.147.2
kernel-preempt-5.3.18-150300.59.147.2
kernel-preempt-devel-5.3.18-150300.59.147.2
kernel-source-5.3.18-150300.59.147.1
kernel-syms-5.3.18-150300.59.147.1
reiserfs-kmp-default-5.3.18-150300.59.147.2

Ссылки

Описание

Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.147.2
Ссылки

Описание

bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.147.2
Ссылки

Описание

An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.147.2
Ссылки

Описание

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.147.2
Ссылки

Описание

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.147.2
Ссылки

Описание

A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group(). We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.147.2
Ссылки

Описание

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.147.2
Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.147.2
Ссылки
Уязвимость SUSE-SU-2024:0153-1