SUSE-SU-2023:3311-1

SUSE-SU-2023:3311-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738). - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287). - CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627). - CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780). - CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586). - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585). - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588). - CVE-2023-38409: Fixed an issue in set_con2fb_map in drivers/video/fbdev/core/fbcon.c. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info) (bsc#1213417). - CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC. This flaw allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812). The following non-security bugs were fixed: - ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (bsc#1212445). - ACPI: CPPC: Add definition for undefined FADT preferred PM profile value (bsc#1212445). - ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes). - ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes). - afs: Adjust ACK interpretation to try and cope with NAT (git-fixes). - afs: Fix access after dec in put functions (git-fixes). - afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes). - afs: Fix dynamic root getattr (git-fixes). - afs: Fix fileserver probe RTT handling (git-fixes). - afs: Fix infinite loop found by xfstest generic/676 (git-fixes). - afs: Fix lost servers_outstanding count (git-fixes). - afs: Fix server->active leak in afs_put_server (git-fixes). - afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes). - afs: Fix updating of i_size with dv jump from server (git-fixes). - afs: Fix vlserver probe RTT handling (git-fixes). - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes). - afs: Use refcount_t rather than atomic_t (git-fixes). - afs: Use the operation issue time instead of the reply time for callbacks (git-fixes). - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes). - ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes). - ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes). - ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes). - ALSA: hda/realtek - remove 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Support ASUS G713PV laptop (git-fixes). - ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (git-fixes). - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless (git-fixes). - ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless (git-fixes). - ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset (bsc#1207129). - ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() (git-fixes). - ALSA: usb-audio: Apply mutex around snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Avoid superfluous endpoint setup (git-fixes). - ALSA: usb-audio: Avoid unnecessary interface change at EP close (git-fixes). - ALSA: usb-audio: Clear fixed clock rate at closing EP (git-fixes). - ALSA: usb-audio: Correct the return code from snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Drop superfluous interface setup at parsing (git-fixes). - ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (git-fixes). - ALSA: usb-audio: Fix wrong kfree issue in snd_usb_endpoint_free_all (git-fixes). - ALSA: usb-audio: More refactoring of hw constraint rules (git-fixes). - ALSA: usb-audio: Properly refcounting clock rate (git-fixes). - ALSA: usb-audio: Rate limit usb_set_interface error reporting (git-fixes). - ALSA: usb-audio: Refcount multiple accesses on the single clock (git-fixes). - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2) (git-fixes). - ALSA: usb-audio: Update for native DSD support quirks (git-fixes). - ALSA: usb-audio: Use atomic_try_cmpxchg in ep_state_update (git-fixes). - ALSA: usb-audio: Workaround for XRUN at prepare (git-fixes). - amd-pstate: Fix amd_pstate mode switch (git-fixes). - ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count() (git-fixes). - ASoC: atmel: Fix the 8K sample parameter in I2SC master (git-fixes). - ASoc: codecs: ES8316: Fix DMIC config (git-fixes). - ASoC: codecs: wcd934x: fix resource leaks on component remove (git-fixes). - ASoC: codecs: wcd938x: fix codec initialisation race (git-fixes). - ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes). - ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes). - ASoC: codecs: wcd938x: fix soundwire initialisation race (git-fixes). - ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes). - ASoC: da7219: Check for failure reading AAD IRQ events (git-fixes). - ASoC: da7219: Flush pending AAD IRQ when suspending (git-fixes). - ASoC: fsl_sai: Disable bit clock with transmitter (git-fixes). - ASoC: fsl_spdif: Silence output on stop (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() (git-fixes). - ASoC: tegra: Fix ADX byte map (git-fixes). - ASoC: tegra: Fix AMX byte map (git-fixes). - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (git-fixes). - ata: pata_ns87415: mark ns87560_tf_read static (git-fixes). - block, bfq: Fix division by zero error on zero wsum (bsc#1213653). - block: Fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes). - bus: mhi: add new interfaces to handle MHI channels directly (bsc#1207948). - bus: mhi: host: add destroy_device argument to mhi_power_down() (bsc#1207948). - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (git-fixes). - ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856). - coda: Avoid partial allocation of sig_inputArgs (git-fixes). - cpufreq: amd-pstate: add amd-pstate driver parameter for mode selection (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State frequencies attributes (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State performance attributes (bsc#1212445). - cpufreq: amd-pstate: Add boost mode support for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: add driver working mode switch support (bsc#1212445). - cpufreq: amd-pstate: Add ->fast_switch() callback (bsc#1212445). - cpufreq: amd-pstate: Add fast switch function for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: Add guided autonomous mode (bsc#12

Есть исправление

Опубликовано

2023-08-14T14:23:39Z

Обновлено

2026-02-04T03:34:23.164227Z

Стек: system

Проверьте свой сервер →