Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2023:4348-1

UNKNOWN

Security update for the Linux Kernel

Published Nov 2, 2023

Modified 2 years ago

Fix available

Details

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778)
CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051)
CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518)
CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095)
CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745).
CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046)
CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861).
CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860).
CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858).
CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467).

The following non-security bugs were fixed:

bpf: propagate precision in ALU/ALU64 operations (git-fixes).
KVM: x86: fix sending PV IPI (git-fixes, bsc#1210853, bsc#1216134).
nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842).

Affected Packages

SUSE:Enterprise Storage 7.1kernel-64kb

Fixed in:

5.3.18-150300.59.141.2

SUSE:Enterprise Storage 7.1kernel-64kb-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Enterprise Storage 7.1kernel-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Enterprise Storage 7.1kernel-default-base

Fixed in:

5.3.18-150300.59.141.2.150300.18.82.2

SUSE:Enterprise Storage 7.1kernel-default-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Enterprise Storage 7.1kernel-devel

Fixed in:

5.3.18-150300.59.141.1

SUSE:Enterprise Storage 7.1kernel-docs

Fixed in:

5.3.18-150300.59.141.2

SUSE:Enterprise Storage 7.1kernel-macros

Fixed in:

5.3.18-150300.59.141.1

SUSE:Enterprise Storage 7.1kernel-obs-build

Fixed in:

5.3.18-150300.59.141.2

SUSE:Enterprise Storage 7.1kernel-preempt

Fixed in:

5.3.18-150300.59.141.2

SUSE:Enterprise Storage 7.1kernel-preempt-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Enterprise Storage 7.1kernel-source

Fixed in:

5.3.18-150300.59.141.1

SUSE:Enterprise Storage 7.1kernel-syms

Fixed in:

5.3.18-150300.59.141.1

SUSE:Enterprise Storage 7.1reiserfs-kmp-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Availability Extension 15 SP3cluster-md-kmp-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Availability Extension 15 SP3dlm-kmp-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Availability Extension 15 SP3gfs2-kmp-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Availability Extension 15 SP3kernel-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Availability Extension 15 SP3ocfs2-kmp-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-64kb

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-64kb-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-default-base

Fixed in:

5.3.18-150300.59.141.2.150300.18.82.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-default-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-devel

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-docs

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-macros

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-obs-build

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-preempt

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-preempt-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-source

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-syms

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSreiserfs-kmp-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-64kb

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-64kb-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-default-base

Fixed in:

5.3.18-150300.59.141.2.150300.18.82.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-default-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-devel

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-docs

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-macros

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-obs-build

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-preempt

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-preempt-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-source

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-syms

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSreiserfs-kmp-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Live Patching 15 SP3kernel-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Live Patching 15 SP3kernel-default-livepatch

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Live Patching 15 SP3kernel-default-livepatch-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Live Patching 15 SP3kernel-livepatch-5_3_18-150300_59_141-default

Fixed in:

1-150300.7.3.2

SUSE:Linux Enterprise Live Patching 15 SP3kernel-livepatch-SLE15-SP3_Update_38

Fixed in:

1-150300.7.3.2

SUSE:Linux Enterprise Micro 5.1kernel-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Micro 5.1kernel-default-base

Fixed in:

5.3.18-150300.59.141.2.150300.18.82.2

SUSE:Linux Enterprise Micro 5.2kernel-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Micro 5.2kernel-default-base

Fixed in:

5.3.18-150300.59.141.2.150300.18.82.2

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-64kb

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-64kb-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-default-base

Fixed in:

5.3.18-150300.59.141.2.150300.18.82.2

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-default-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-devel

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-docs

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-macros

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-obs-build

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-preempt

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-preempt-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-source

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-syms

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise Server 15 SP3-LTSSkernel-zfcpdump

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server 15 SP3-LTSSreiserfs-kmp-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server for SAP Applications 15 SP3kernel-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server for SAP Applications 15 SP3kernel-default-base

Fixed in:

5.3.18-150300.59.141.2.150300.18.82.2

SUSE:Linux Enterprise Server for SAP Applications 15 SP3kernel-default-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server for SAP Applications 15 SP3kernel-devel

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3kernel-docs

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server for SAP Applications 15 SP3kernel-macros

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3kernel-obs-build

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server for SAP Applications 15 SP3kernel-preempt

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server for SAP Applications 15 SP3kernel-preempt-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Linux Enterprise Server for SAP Applications 15 SP3kernel-source

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3kernel-syms

Fixed in:

5.3.18-150300.59.141.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3reiserfs-kmp-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Manager Proxy 4.2kernel-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Manager Proxy 4.2kernel-default-base

Fixed in:

5.3.18-150300.59.141.2.150300.18.82.2

SUSE:Manager Proxy 4.2kernel-default-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Manager Proxy 4.2kernel-devel

Fixed in:

5.3.18-150300.59.141.1

SUSE:Manager Proxy 4.2kernel-macros

Fixed in:

5.3.18-150300.59.141.1

SUSE:Manager Proxy 4.2kernel-preempt

Fixed in:

5.3.18-150300.59.141.2

SUSE:Manager Proxy 4.2kernel-source

Fixed in:

5.3.18-150300.59.141.1

SUSE:Manager Server 4.2kernel-default

Fixed in:

5.3.18-150300.59.141.2

SUSE:Manager Server 4.2kernel-default-base

Fixed in:

5.3.18-150300.59.141.2.150300.18.82.2

SUSE:Manager Server 4.2kernel-default-devel

Fixed in:

5.3.18-150300.59.141.2

SUSE:Manager Server 4.2kernel-devel

Fixed in:

5.3.18-150300.59.141.1

SUSE:Manager Server 4.2kernel-macros

Fixed in:

5.3.18-150300.59.141.1

SUSE:Manager Server 4.2kernel-preempt

Fixed in:

5.3.18-150300.59.141.2

SUSE:Manager Server 4.2kernel-source

Fixed in:

5.3.18-150300.59.141.1

SUSE:Manager Server 4.2kernel-zfcpdump

Fixed in:

5.3.18-150300.59.141.2

openSUSE:Leap 15.4dtb-aarch64

Fixed in:

5.3.18-150300.59.141.1

openSUSE:Leap 15.4dtb-al

Fixed in:

5.3.18-150300.59.141.1

openSUSE:Leap 15.4dtb-zte

Fixed in:

5.3.18-150300.59.141.1

References

REPORThttps://bugzilla.suse.com/1210778 REPORThttps://bugzilla.suse.com/1210853 REPORThttps://bugzilla.suse.com/1212051 REPORThttps://bugzilla.suse.com/1214842 REPORThttps://bugzilla.suse.com/1215095 REPORThttps://bugzilla.suse.com/1215467 REPORThttps://bugzilla.suse.com/1215518 REPORThttps://bugzilla.suse.com/1215745 REPORThttps://bugzilla.suse.com/1215858 REPORThttps://bugzilla.suse.com/1215860 REPORThttps://bugzilla.suse.com/1215861 REPORThttps://bugzilla.suse.com/1216046 REPORThttps://bugzilla.suse.com/1216051 REPORThttps://bugzilla.suse.com/1216134 WEBhttps://www.suse.com/security/cve/CVE-2023-2163 WEBhttps://www.suse.com/security/cve/CVE-2023-31085 WEBhttps://www.suse.com/security/cve/CVE-2023-3111 WEBhttps://www.suse.com/security/cve/CVE-2023-34324 WEBhttps://www.suse.com/security/cve/CVE-2023-3777 WEBhttps://www.suse.com/security/cve/CVE-2023-39189 WEBhttps://www.suse.com/security/cve/CVE-2023-39192 WEBhttps://www.suse.com/security/cve/CVE-2023-39193 WEBhttps://www.suse.com/security/cve/CVE-2023-39194 WEBhttps://www.suse.com/security/cve/CVE-2023-42754 WEBhttps://www.suse.com/security/cve/CVE-2023-45862 ADVISORYhttps://www.suse.com/support/update/announcement/2023/suse-su-20234348-1/

Upstream

CVE-2023-2163 CVE-2023-31085 CVE-2023-3111 CVE-2023-34324 CVE-2023-3777 CVE-2023-39189 CVE-2023-39192 CVE-2023-39193 CVE-2023-39194 CVE-2023-42754 CVE-2023-45862

Related

CVE-2023-2163 CVE-2023-31085 CVE-2023-3111 CVE-2023-34324 CVE-2023-3777 CVE-2023-39189 CVE-2023-39192 CVE-2023-39193 CVE-2023-39194 CVE-2023-42754 CVE-2023-45862

Ecosystems

SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Availability Extension 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Live Patching 15 SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.4

Timeline

PublishedNov 2, 2023

ModifiedNov 2, 2023

SUSE-SU-2023:4348-1 | Mondoo Vulnerability Intelligence