SUSE-SU-2023:1803-1

SUSE-SU-2023:1803-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547). - CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256). - CVE-2021-3923: Fixed stack information leak vulnerability that could lead to kernel protection bypass in infiniband RDMA (bsc#1209778). - CVE-2022-20567: Fixed use after free that could lead to a local privilege escalation in pppol2tp_create of l2tp_ppp.c (bsc#1208850). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634). - CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1209289). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036). - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207125). - CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291). - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052). - CVE-2023-28772: Fixed buffer overflow in seq_buf_putmem_hex in lib/seq_buf.c (bsc#1209549). The following non-security bugs were fixed: - Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes). - Bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - Do not sign the vanilla kernel (bsc#1209008). - Input: atmel_mxt_ts - fix double free in mxt_read_info_block (git-fixes). - KVM: arm64: Hide system instruction access to Trace registers (git-fixes) - NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes). [iivanov] Fix Patch-mainline to v6.3-rc5 - PCI/MSI: Enforce MSI entry updates to be visible (git-fixes). - PCI/MSI: Enforce that MSI-X table entry is masked for update (git-fixes). - PCI/MSI: Mask all unused MSI-X entries (git-fixes). - PCI/MSI: Skip masking MSI-X on Xen PV (git-fixes). - PCI/PM: Always return devices to D0 when thawing (git-fixes). - PCI/PM: Avoid using device_may_wakeup() for runtime PM (git-fixes). - PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints (git-fixes). - PCI: Add ACS quirk for iProc PAXB (git-fixes). - PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0 (git-fixes). - PCI: Avoid FLR for AMD Starship USB 3.0 (git-fixes). - PCI: Make ACS quirk implementations more uniform (git-fixes). - PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently (git-fixes). - PCI: PM: Avoid skipping bus-level PM on platforms without ACPI (git-fixes). - PCI: Unify ACS quirk desired vs provided checking (git-fixes). - PCI: Use pci_update_current_state() in pci_enable_device_flags() (git-fixes). - PCI: aardvark: Do not blindly enable ASPM L0s and do not write to read-only register (git-fixes). - PCI: aardvark: Do not rely on jiffies while holding spinlock (git-fixes). - PCI: aardvark: Do not touch PCIe registers if no card connected (git-fixes). - PCI: aardvark: Fix a leaked reference by adding missing of_node_put() (git-fixes). - PCI: aardvark: Fix checking for PIO Non-posted Request (git-fixes). - PCI: aardvark: Fix kernel panic during PIO transfer (git-fixes). - PCI: aardvark: Improve link training (git-fixes). - PCI: aardvark: Indicate error in 'val' when config read fails (git-fixes). - PCI: aardvark: Introduce an advk_pcie_valid_device() helper (git-fixes). - PCI: aardvark: Remove PCIe outbound window configuration (git-fixes). - PCI: aardvark: Train link immediately after enabling training (git-fixes). - PCI: aardvark: Wait for endpoint to be ready before training link (git-fixes). - PCI: endpoint: Cast the page number to phys_addr_t (git-fixes). - PCI: endpoint: Fix for concurrent memory allocation in OB address region (git-fixes). - PCI: hv: Add a per-bus mutex state_lock (bsc#1207001). - PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207001). - PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207001). - PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207001). - PCI: qcom: Use PHY_REFCLK_USE_PAD only for ipq8064 (git-fixes). - PCI: tegra: Fix OF node reference leak (git-fixes). - PCI: xgene-msi: Fix race in installing chained irq handler (git-fixes). - PM: hibernate: flush swap writer after marking (git-fixes). - README.BRANCH: Adding myself to the maintainer list - README: remove copy of config and update the text (bsc#1191924) - Revert 'PCI: hv: Fix a timing issue which causes kdump to fail occasionally' (bsc#1207001). - Revert 'arm64: dts: juno: add dma-ranges property' (git-fixes) - Revert 'mei: me: enable asynchronous probing' (bsc#1208048, bsc#1209126). - SUNRPC: Fix a server shutdown leak (git-fixes). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arm64/alternatives: do not patch up internal branches (git-fixes) - arm64/alternatives: move length validation inside the subsection (git-fixes) - arm64/alternatives: use subsections for replacement sequences (git-fixes) - arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes) - arm64/mm: fix variable 'pud' set but not used (git-fixes) - arm64/mm: return cpu_all_mask when node is NUMA_NO_NODE (git-fixes) - arm64/vdso: Discard .note.gnu.property sections in vDSO (git-fixes) - arm64: Discard .note.GNU-stack section (bsc#1203693 bsc#1209798). - arm64: Do not forget syscall when starting a new thread. (git-fixes) - arm64: Fix compiler warning from pte_unmap() with (git-fixes) - arm64: Mark __stack_chk_guard as __ro_after_init (git-fixes) - arm64: Use test_tsk_thread_flag() for checking TIF_SINGLESTEP (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: cpu_ops: fix a leaked reference by adding missing of_node_put (git-fixes) - arm64: fix oops in concurrently setting insn_emulation sysctls (git-fixes) - arm64: kprobe: make page to RO mode when allocate it (git-fixes) - arm64: kpti: ensure patched kernel text is fetched from PoU (git-fixes) - arm64: psci: Avoid printing in cpu_psci_cpu_die() (git-fixes) - arm64: psci: Reduce the waiting time for cpu_psci_cpu_kill() (git-fixes) - arm64: unwind: Prohibit probing on return_address() (git-fixes) - crypto: arm64 - Fix unused variable compilation warnings of (git-fixes) - dt-bindings: reset: meson8b: fix duplicate reset IDs (git-fixes). - ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes). - git_sort: tests: Adjust to new net repository location - git_sort: tests: Fix tests failing on SLE15 Use the correct base image, pygit2 is not found by pythong otherwise. - git_sort: tests: Kernel:tools does not have Leap repos, use SLE - git_sort: tests: Use 15.4, 15.3 is EOL - git_sort: tests: do not disable package repository GPG check This adds the Kernel repository key and enables GPG check for package installation inside containers. - git_sort: tests: exit on error - ima: Fix function name error in comment (git-fixes). - ipv4: route: fix inet_rtm_getroute induced crash (git-fixes). - kabi: PCI: endpoint: Fix for concurrent memory allocation in OB address region (git-fixes). - kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179). - kfifo: fix ternary sign extension bugs (git-fixes). - kgdb: Drop malformed kernel doc comment (git-fixes). - media: coda: A

Есть исправление

Опубликовано

2023-04-10T09:07:18Z

Обновлено

2026-02-04T02:43:48.842384Z

Стек: system

Проверьте свой сервер →