p PatchFirst

SUSE-SU-2023:1710-1

SUSE-SU-2023:1710-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. - CVE-2022-3523: Fixed a use after free related to device private page handling (bsc#1204363). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1078: Fixed a heap out-of-bounds write in rds_rm_zerocopy_callback (bsc#1208601). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837). - CVE-2023-22995: Fixed lacks of certain platform_device_put and kfree in drivers/usb/dwc3/dwc3-qcom.c (bsc#1208741). - CVE-2023-22998: Fixed NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776). - CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816). - CVE-2023-23004: Fixed misinterpretation of get_sg_table return value (bsc#1208843). - CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051). - CVE-2023-25012: Fixed a use-after-free in bigben_set_led() (bsc#1207560). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291). The following non-security bugs were fixed: - [infiniband] READ is 'data destination', not source... (git-fixes) - [xen] fix 'direction' argument of iov_iter_kvec() (git-fixes). - acpi/x86: Add support for LPS0 callback handler (git-fixes). - acpi: Do not build ACPICA with '-Os' (git-fixes). - acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes). - acpi: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224). - acpi: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224). - acpi: battery: Fix missing NUL-termination with large strings (git-fixes). - acpi: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes). - acpi: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes). - acpi: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224). - acpi: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224). - acpi: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224). - acpi: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224). - acpi: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224). - acpi: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224). - acpi: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224). - acpi: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224). - acpica: Drop port I/O validation for some regions (git-fixes). - acpica: nsrepair: handle cases without a return value correctly (git-fixes). - add cherry-picked id for nouveau patch - alsa: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes). - alsa: hda/ca0132: minor fix for allocation size (git-fixes). - alsa: hda/conexant: add a new hda codec SN6180 (git-fixes). - alsa: hda/realtek - fixed wrong gpio assigned (git-fixes). - alsa: hda/realtek: Add Positivo N14KP6-TG (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - alsa: hda: Do not unset preset when cleaning up codec (git-fixes). - alsa: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes). - alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes). - alsa: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (git-fixes). - alsa: pci: lx6464es: fix a debug loop (git-fixes). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arm64: Treat ESR_ELx as a 64-bit register (git-fixes) - arm64: atomics: remove LL/SC trampolines (git-fixes) - arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes). - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes). - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes). - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes). - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes). - arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes). - arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes). - arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes) - arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes). - arm64: dts: juno: Add missing MHU secure-irq (git-fixes) - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes). - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes). - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes). - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes). - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes). - arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes). - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes). - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes). - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes). - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes). - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes). - arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes). - arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes). - arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes). - arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sc7280: cor

Есть исправление

Опубликовано
Обновлено

Стек: system

Затронутые продукты и версии

  • kernel-default SUSE:Linux Enterprise Micro 5.3

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3

    Обновитесь до 5.14.21-150400.24.55.3

  • kernel-default-base SUSE:Linux Enterprise Micro 5.3

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3.150400.24.22.7

    Обновитесь до 5.14.21-150400.24.55.3.150400.24.22.7

  • kernel-default SUSE:Linux Enterprise Micro 5.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3

    Обновитесь до 5.14.21-150400.24.55.3

  • kernel-default-base SUSE:Linux Enterprise Micro 5.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3.150400.24.22.7

    Обновитесь до 5.14.21-150400.24.55.3.150400.24.22.7

  • kernel-64kb SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.2

    Обновитесь до 5.14.21-150400.24.55.2

  • kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3

    Обновитесь до 5.14.21-150400.24.55.3

  • kernel-default-base SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3.150400.24.22.7

    Обновитесь до 5.14.21-150400.24.55.3.150400.24.22.7

  • kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.2

    Обновитесь до 5.14.21-150400.24.55.2

  • kernel-zfcpdump SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.2

    Обновитесь до 5.14.21-150400.24.55.2

  • kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.1

    Обновитесь до 5.14.21-150400.24.55.1

  • kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3

    Обновитесь до 5.14.21-150400.24.55.3

  • kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.2

    Обновитесь до 5.14.21-150400.24.55.2

  • kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.1

    Обновитесь до 5.14.21-150400.24.55.1

  • kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3

    Обновитесь до 5.14.21-150400.24.55.3

  • kernel-default SUSE:Linux Enterprise Live Patching 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3

    Обновитесь до 5.14.21-150400.24.55.3

  • kernel-livepatch-sle15-sp4_update_10 SUSE:Linux Enterprise Live Patching 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 1-150400.9.3.7

    Обновитесь до 1-150400.9.3.7

  • kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3

    Обновитесь до 5.14.21-150400.24.55.3

  • kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3

    Обновитесь до 5.14.21-150400.24.55.3

  • kernel-default openSUSE:Leap Micro 5.3

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3

    Обновитесь до 5.14.21-150400.24.55.3

  • kernel-default-base openSUSE:Leap Micro 5.3

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3.150400.24.22.7

    Обновитесь до 5.14.21-150400.24.55.3.150400.24.22.7

  • dtb-aarch64 openSUSE:Leap 15.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.1

    Обновитесь до 5.14.21-150400.24.55.1

  • kernel-64kb openSUSE:Leap 15.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.2

    Обновитесь до 5.14.21-150400.24.55.2

  • kernel-debug openSUSE:Leap 15.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3

    Обновитесь до 5.14.21-150400.24.55.3

  • kernel-default openSUSE:Leap 15.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.55.3

    Обновитесь до 5.14.21-150400.24.55.3

Первоисточники

Проверьте свой сервер →