SUSE-SU-2023:2822-1

SUSE-SU-2023:2822-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-3268: Fixed an out of bounds (OOB) memory access flaw in relay_file_read_start_pos in kernel/relay.c (bsc#1212502). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). - CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501). - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). - CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). The following non-security bugs were fixed: - Decrease the number of SMB3 smbdirect client SGEs (bsc#1190317). - Drop dvb-core fix patch due to bug (bsc#1205758). - Fix formatting of client smbdirect RDMA logging (bsc#1190317). - Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158). - Fix usrmerge error (boo#1211796). - Handle variable number of SGEs in client smbdirect send (bsc#1190317). - Reduce client smbdirect max receive segment size (bsc#1190317). - Remove usrmerge compatibility symlink in buildroot (boo#1211796) - affs: initialize fsdata in affs_truncate() (git-fixes). - bnx2x: Check if transceiver implements DDM before access (git-fixes). - bnxt_en: Fix mqprio and XDP ring checking logic (git-fixes). - bnxt_en: Fix typo in PCI id to device description string mapping (git-fixes). - bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes). - bnxt_en: Remove debugfs when pci_register_driver failed (git-fixes). - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (git-fixes). - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (git-fixes). - bnxt_en: reclaim max resources if sriov enable fails (git-fixes). - bugzilla-create: always end email with @suse.com - bugzilla-create: take bugzilla email from BUGZILLA_ACCOUNT_EMAIL env var Some people have emails in bugzilla that are completely different than emails they use in git and providing one with -e option is tedious. Make bugzilla-create more flexible by providing the third options that sits between command line option and git-config automation. - cdc-ncm: avoid overflow in sanity checking (git-fixes). - ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212938). - cifs: Add helper function to check smb1+ server (bsc#1190317). - cifs: Convert struct fealist away from 1-element array (bsc#1190317). - cifs: Fix connections leak when tlink setup failed (bsc#1190317). - cifs: Fix lost destroy smbd connection when MR allocate failed (bsc#1190317). - cifs: Fix memory leak when build ntlmssp negotiate blob failed (bsc#1190317). - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (bsc#1190317). - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (bsc#1190317). - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (bsc#1190317). - cifs: Fix smb2_set_path_size() (bsc#1190317). - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (bsc#1190317). - cifs: Fix uninitialized memory read for smb311 posix symlink create (bsc#1190317). - cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1190317). - cifs: Fix uninitialized memory reads for oparms.mode (bsc#1190317). - cifs: Fix use-after-free in rdata->read_into_pages() (bsc#1190317). - cifs: Fix warning and UAF when destroy the MR list (bsc#1190317). - cifs: Fix wrong return value checking when GETFLAGS (bsc#1190317). - cifs: Fix xid leak in cifs_copy_file_range() (bsc#1190317). - cifs: Fix xid leak in cifs_create() (bsc#1190317). - cifs: Fix xid leak in cifs_flock() (bsc#1190317). - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1190317). - cifs: Move the in_send statistic to __smb_send_rqst() (bsc#1190317). - cifs: Remove duplicated include in cifsglob.h (bsc#1190317). - cifs: Replace zero-length arrays with flexible-array members (bsc#1190317). - cifs: Spelling s/EACCESS/EACCES/ (bsc#1190317). - cifs: Use help macro to get the header preamble size (bsc#1190317). - cifs: Use help macro to get the mid header size (bsc#1190317). - cifs: Use kstrtobool() instead of strtobool() (bsc#1190317). - cifs: add check for returning value of SMB2_close_init (bsc#1190317). - cifs: add check for returning value of SMB2_set_info_init (bsc#1190317). - cifs: add missing spinlock around tcon refcount (bsc#1190317). - cifs: always initialize struct msghdr smb_msg completely (bsc#1190317). - cifs: avoid re-lookups in dfs_cache_find() (bsc#1190317). - cifs: avoid use of global locks for high contention data (bsc#1190317). - cifs: destage dirty pages before re-reading them for cache=none (bsc#1190317). - cifs: do not include page data when checking signature (bsc#1190317). - cifs: do not send down the destination address to sendmsg for a SOCK_STREAM (bsc#1190317). - cifs: do not take exclusive lock for updating target hints (bsc#1190317). - cifs: do not try to use rdma offload on encrypted connections (bsc#1190317). - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1190317). - cifs: fix confusing debug message (bsc#1190317). - cifs: fix double free on failed kerberos auth (bsc#1190317). - cifs: fix double-fault crash during ntlmssp (bsc#1190317). - cifs: fix indentation in make menuconfig options (bsc#1190317). - cifs: fix memory leaks in session setup (bsc#1190317). - cifs: fix missing display of three mount options (bsc#1190317). - cifs: fix mount on old smb servers (bsc#1190317). - cifs: fix oops during encryption (bsc#1190317). - cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1190317). - cifs: fix potential deadlock in cache_refresh_path() (bsc#1190317). - cifs: fix potential memory leaks in session setup (bsc#1190317). - cifs: fix race in assemble_neg_contexts() (bsc#1190317). - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1190317). - cifs: fix small mempool leak in SMB2_negotiate() (bsc#1190317). - cifs: fix use-after-free caused by invalid pointer `hostname` (bsc#1190317). - cifs: fix various whitespace errors in headers (bsc#1190317). - cifs: get rid of dns resolve worker (bsc#1190317). - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1190317). - cifs: handle cache lookup errors different than -ENOENT (bsc#1190317). - cifs: ignore ipc reconnect failures during dfs failover (bsc#1190317). - cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1190317). - cifs: lease key is uninitialized in smb1 paths (bsc#1190317). - cifs: lease key is uninitialized in two additional functions when smb1 (bsc#1190317). - cifs: match even the scope id for ipv6 addresses (bsc#1190317). - cifs: minor cleanup of some headers (bsc#1

Есть исправление

Опубликовано

2023-07-14T07:33:01Z

Обновлено

2025-05-02T04:34:14.302317Z

Стек: system

Проверьте свой сервер →