SUSE-SU-2023:2538-1

SUSE-SU-2023:2538-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806). - CVE-2022-3566: Fixed race condition in the TCP Handler (bsc#1204405). - CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760). - CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758). - CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762). - CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803). - CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756). - CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783). - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940). - CVE-2023-2194: Fixed an out-of-bounds write vulnerability in the SLIMpro I2C device driver (bsc#1210715). - CVE-2023-32269: Fixed a use-after-free in af_netrom.c, related to the fact that accept() was also allowed for a successfully connected AF_NETROM socket (bsc#1211186). - CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366). - CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287). - CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629). The following non-security bugs were fixed: - ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes). - Documentation: Document sysfs interfaces purr, spurr, idle_purr, idle_spurr (PED-3947 bsc#1210544 ltc#202303). - Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622). - IB/hfi1: Assign npages earlier (git-fixes) - IB/iser: bound protection_sg size by data_sg size (git-fixes) - IB/mlx4: Fix memory leaks (git-fixes) - IB/mlx4: Increase the timeout for CM cache (git-fixes) - IB/mlx5: Fix initializing CQ fragments buffer (git-fixes) - IB/rdmavt: Add __init/__exit annotations to module init/exit funcs (git-fixes) - IB/usnic: Fix potential deadlock (git-fixes) - KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1 (git-fixes). - KVM: x86: Update the exit_qualification access bits while walking an address (git-fixes). - KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing (git-fixes). - KVM: x86: emulator: em_sysexit should update ctxt->mode (git-fixes). - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (git-fixes). - KVM: x86: emulator: update the emulation mode after CR0 write (git-fixes). - KVM: x86: fix empty-body warnings (git-fixes). - KVM: x86: fix incorrect comparison in trace event (git-fixes). - KVM: x86: svm: report MSR_IA32_MCG_EXT_CTL as unsupported (git-fixes). - Move upstreamed media fixes into sorted section - PCI: Add ACS quirks for Cavium multi-function devices (git-fixes). - PCI: Call Max Payload Size-related fixup quirks early (git-fixes). - PCI: Mark Atheros QCA6174 to avoid bus reset (git-fixes). - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported (git-fixes). - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure (git-fixes). - PCI: aardvark: Configure PCIe resources from 'ranges' DT property (git-fixes). - PCI: aardvark: Fix PCIe Max Payload Size setting (git-fixes). - PCI: aardvark: Fix checking for PIO status (git-fixes). - PCI: aardvark: Fix masking and unmasking legacy INTx interrupts (git-fixes). - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response (git-fixes). - PCI: xilinx-nwl: Enable the clock through CCF (git-fixes). - RDMA/bnxt_re: Restrict the max_gids to 256 (git-fixes) - RDMA/cma: Do not change route.addr.src_addr.ss_family (git-fixes) - RDMA/cma: Fix rdma_resolve_route() memory leak (git-fixes) - RDMA/core: Do not access cm_id after its destruction (git-fixes) - RDMA/cxgb4: Fix missing error code in create_qp() (git-fixes) - RDMA/hfi1: Prevent panic when SDMA is disabled (git-fixes) - RDMA/hns: Bugfix for querying qkey (git-fixes) - RDMA/i40iw: Fix potential use after free (git-fixes) - RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()' (git-fixes) - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (git-fixes) - RDMA/mlx5: Block delay drop to unprivileged users (git-fixes) - RDMA/rxe: Fix error type of mmap_offset (git-fixes) - RDMA/srp: Move large values to a new enum for gcc13 (git-fixes) - RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer (git-fixes) - RDMA/usnic: fix set-but-not-unused variable 'flags' warning (git-fixes) - RDMa/mthca: Work around -Wenum-conversion warning (git-fixes) - RDS: IB: Fix null pointer issue (git-fixes). - USB: core: Add routines for endpoint checks in old drivers (git-fixes). - USB: sisusbvga: Add endpoint checks (git-fixes). - Update patch reference for libata fix (bsc#1118212). - adm8211: fix error return code in adm8211_probe() (git-fixes). - backlight: lm3630a: Fix return code of .update_status() callback (bsc#1129770) - blacklist.conf: workqueue: Cosmetic change. Not worth backporting (bsc#1211275) - bonding: show full hw address in sysfs for slave entries (git-fixes). - ceph: force updating the msg pointer in non-split case (bsc#1211801). - cpuidle/powernv: avoid double irq enable coming out of idle (PED-3947 bsc#1210544 ltc#202303). - cpuidle: powerpc: cpuidle set polling before enabling irqs (PED-3947 bsc#1210544 ltc#202303). - cpuidle: powerpc: no memory barrier after break from idle (PED-3947 bsc#1210544 ltc#202303). - cpuidle: powerpc: read mostly for common globals (PED-3947 bsc#1210544 ltc#202303). - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878). - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes). - fbcon: Check font dimension limits (bsc#1154048) - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (bsc#1154048) - fix kcm_clone() (git-fixes). - fotg210-udc: Add missing completion handler (git-fixes). - ip6_tunnel: allow ip6gre dev mtu to be set below 1280 (git-fixes). - ip6_tunnel: fix IFLA_MTU ignored on NEWLINK (git-fixes). - ipoib: correcly show a VF hardware address (git-fixes) - ipv4: ipv4_default_advmss() should use route mtu (git-fixes). - ipv6: Reinject IPv6 packets if IPsec policy matches after SNAT (git-fixes). - ipv6: icmp6: Allow icmp messages to be looped back (git-fixes). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - kcm: Check if sk_user_data already set in kcm_attach (git-fixes). - kvm: mmu: Do not read PDPTEs when paging is not enabled (git-fixes). - l2tp: remove configurable payload offset (git-fixes). - l2tp: remove l2specific_len dependency in l2tp_core (git-fixes). - libata: add horkage for ASMedia 1092 (git-fixes). - mac80211: choose first enabled channel for monitor (git-fixes). - mac80211: drop multicast fragments (git-fixes). - mac80211: fix fast-rx encryption check (git-fixes). - mac80211: pause TX while changing interface type (git-fixes). - media: radio-shark: Add endpoint checks (git-fixes). - mlx4: Use snprintf instead of complicated strcpy (git-fixes) - mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes). - net/iucv: Fix size of interrupt data (bsc#1211466). - net/mlx4_core: Fix return codes of unsupported operations (git-fixes). - net/tcp/illinois: replace broken algorithm referenc

Есть исправление

Опубликовано

2023-06-19T07:56:30Z

Обновлено

2026-02-04T04:41:01.652225Z

Стек: system

Проверьте свой сервер →