SUSE-SU-2023:3172-1

SUSE-SU-2023:3172-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867). - CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059). The following non-security bugs were fixed: - Dropped patch that caused issues with k3s (bsc#1213705). - ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices (git-fixes). - ASoC: SOF: topology: Fix logic for copying tuples (git-fixes). - Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (git-fixes). - Bluetooth: ISO: consider right CIS when removing CIG at cleanup (git-fixes). - Bluetooth: ISO: fix iso_conn related locking and validity issues (git-fixes). - Bluetooth: ISO: use hci_sync for setting CIG parameters (git-fixes). - Bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes). - Bluetooth: fix use-bdaddr-property quirk (git-fixes). - Bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes). - Bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes). - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes). - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (git-fixes). - Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758) - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (bsc#1212525). - PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() (git-fixes). - Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes) - Revert 'drm/i915: Disable DSB usage for now' (git-fixes). - USB: dwc2: Fix some error handling paths (git-fixes). - USB: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes). - USB: gadget: udc: core: Prevent soft_connect_store() race (git-fixes). - USB: typec: Fix fast_role_swap_current show function (git-fixes). - Update config and supported.conf files due to renaming. - acpi: Fix suspend with Xen PV (git-fixes). - adreno: Shutdown the GPU properly (git-fixes). - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes) - arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes) - arm64: vdso: Pass (void *) to virt_to_page() (git-fixes) - arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes) - can: bcm: Fix UAF in bcm_proc_show() (git-fixes). - ceph: add a dedicated private data for netfs rreq (bsc#1213205). - ceph: fix blindly expanding the readahead windows (bsc#1213206). - cifs: add a warning when the in-flight count goes negative (bsc#1193629). - cifs: address unused variable warning (bsc#1193629). - cifs: do all necessary checks for credits within or before locking (bsc#1193629). - cifs: fix lease break oops in xfstest generic/098 (bsc#1193629). - cifs: fix max_credits implementation (bsc#1193629). - cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629). - cifs: fix session state check in smb2_find_smb_ses (bsc#1193629). - cifs: fix session state transition to avoid use-after-free issue (bsc#1193629). - cifs: fix sockaddr comparison in iface_cmp (bsc#1193629). - cifs: fix status checks in cifs_tree_connect (bsc#1193629). - cifs: log session id when a matching ses is not found (bsc#1193629). - cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629). - cifs: prevent use-after-free by freeing the cfile later (bsc#1193629). - cifs: print all credit counters in DebugData (bsc#1193629). - cifs: print client_guid in DebugData (bsc#1193629). - cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629). - cifs: print nosharesock value while dumping mount options (bsc#1193629). - codel: fix kernel-doc notation warnings (git-fixes). - cpufreq: tegra194: Fix module loading (git-fixes). - devlink: fix kernel-doc notation warnings (git-fixes). - dma-buf/dma-resv: Stop leaking on krealloc() failure (git-fixes). - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes). - drm/amd/amdgpu: limit one queue per gang (git-fixes). - drm/amd/amdgpu: update mes11 api def (git-fixes). - drm/amd/display (gcc13): fix enum mismatch (git-fixes). - drm/amd/display: Add Z8 allow states to z-state support list (git-fixes). - drm/amd/display: Add debug option to skip PSR CRTC disable (git-fixes). - drm/amd/display: Add minimum Z8 residency debug option (git-fixes). - drm/amd/display: Add missing WA and MCLK validation (git-fixes). - drm/amd/display: Change default Z8 watermark values (git-fixes). - drm/amd/display: Correct DML calculation to align HW formula (git-fixes). - drm/amd/display: Correct DML calculation to follow HW SPEC (git-fixes). - drm/amd/display: Do not update DRR while BW optimizations pending (git-fixes). - drm/amd/display: Enable HostVM based on rIOMMU active (git-fixes). - drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes (git-fixes). - drm/amd/display: Ensure vmin and vmax adjust for DCE (git-fixes). - drm/amd/display: Fix 4to1 MPC black screen with DPP RCO (git-fixes). - drm/amd/display: Fix Z8 support configurations (git-fixes). - drm/amd/display: Fix a test CalculatePrefetchSchedule() (git-fixes). - drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() (git-fixes). - drm/amd/display: Have Payload Properly Created After Resume (git-fixes). - drm/amd/display: Lowering min Z8 residency time (git-fixes). - drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes). - drm/amd/display: Refactor eDP PSR codes (git-fixes). - drm/amd/display: Remove FPU guards from the DML folder (git-fixes). - drm/amd/display: Remove optimization for VRR updates (git-fixes). - drm/amd/display: Remove stutter only configurations (git-fixes). - drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes). - drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes). - drm/amd/display: Update minimum stutter residency for DCN314 Z8 (git-fixes). - drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes). - drm/amd/display: fix PSR-SU/DSC interoperability support (git-fixes). - drm/amd/display: fix a divided-by-zero error (git-fixes). - drm/amd/display: fixed dcn30+ underflow issue (git-fixes). - drm/amd/display: limit timing for single dimm memory (git-fixes). - drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes). - drm/amd/display: set dcn315 lb bpp to 48 (git-fixes). - drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 (git-fixes). - drm/amd/pm: avoid potential UBSAN issue on legacy asics (git-fixes). - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs (git-fixes). - drm/amd/pm: fix possible power mode mismatch between driver and PMFW (git-fixes). - drm/amd/pm: resolve reboot exceptio

Есть исправление

Опубликовано

2023-08-03T06:36:45Z

Обновлено

2025-05-02T04:34:27.608839Z

Стек: system

Проверьте свой сервер →