SUSE-SU-2023:4732-1

SUSE-SU-2023:4732-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2006: Fixed a race condition in the RxRPC network protocol (bsc#1210447). - CVE-2023-25775: Fixed improper access control in the Intel Ethernet Controller RDMA driver (bsc#1216959). - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095) - CVE-2023-39197: Fixed a out-of-bounds read in nf_conntrack_dccp_packet() (bsc#1216976). - CVE-2023-39198: Fixed a race condition leading to use-after-free in qxl_mode_dumb_create() (bsc#1216965). - CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420). - CVE-2023-45863: Fixed a out-of-bounds write in fill_kobj_path() (bsc#1216058). - CVE-2023-45871: Fixed an issue in the IGB driver, where the buffer size may not be adequate for frames larger than the MTU (bsc#1216259). - CVE-2023-46813: Fixed SEV-ES local priv escalation (bsc#1212649). - CVE-2023-46862: Fixed a NULL pointer dereference in io_uring_show_fdinfo() (bsc#1216693). - CVE-2023-5158: Fixed a denial of service in vringh_kiov_advance() in drivers/vhost/vringh.c in the host side of a virtio ring (bsc#1215710). - CVE-2023-5633: Fixed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface (bsc#1216527). - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216584). - CVE-2023-6039: Fixed a use-after-free in lan78xx_disconnect in drivers/net/usb/lan78xx.c (bsc#1217068). - CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217332). The following non-security bugs were fixed: - acpi: fpdt: properly handle invalid fpdt subtables (git-fixes). - acpi: resource: do irq override on tongfang gmxxgxx (git-fixes). - acpi: resource: skip irq override on asus expertbook b1402cva (git-fixes). - acpi: sysfs: fix create_pnp_modalias() and create_of_modalias() (git-fixes). - alsa: hda/realtek - add dell alc295 to pin fall back table (git-fixes). - alsa: hda/realtek - alc287 realtek i2s speaker platform support (git-fixes). - alsa: hda/realtek - enable internal speaker of asus k6500zc (git-fixes). - alsa: hda/realtek: add quirk for asus ux7602zm (git-fixes). - alsa: hda/realtek: add quirks for asus 2024 zenbooks (git-fixes). - alsa: hda/realtek: add quirks for hp laptops (git-fixes). - alsa: hda/realtek: add support dual speaker for dell (git-fixes). - alsa: hda/realtek: enable mute led on hp 255 g10 (git-fixes). - alsa: hda/realtek: enable mute led on hp 255 g8 (git-fixes). - alsa: hda: asus um5302la: added quirks for cs35l41/10431a83 on i2c bus (git-fixes). - alsa: hda: cs35l41: fix unbalanced pm_runtime_get() (git-fixes). - alsa: hda: cs35l41: undo runtime pm changes at driver exit time (git-fixes). - alsa: hda: disable power-save on kontron singlepc (bsc#1217140). - alsa: hda: fix possible null-ptr-deref when assigning a stream (git-fixes). - alsa: hda: intel-dsp-config: fix jsl chromebook quirk detection (git-fixes). - alsa: info: fix potential deadlock at disconnection (git-fixes). - alsa: usb-audio: add quirk flag to enable native dsd for mcintosh devices (git-fixes). - arm/xen: fix xen_vcpu_info allocation alignment (git-fixes). - arm64: add cortex-a520 cpu part definition (git-fixes) - arm64: allow kprobes on el0 handlers (git-fixes) - arm64: armv8_deprecated move emulation functions (git-fixes) - arm64: armv8_deprecated: fix unused-function error (git-fixes) - arm64: armv8_deprecated: fold ops into insn_emulation (git-fixes) - arm64: armv8_deprecated: move aarch32 helper earlier (git-fixes) - arm64: armv8_deprecated: rework deprected instruction handling (git-fixes) - arm64: consistently pass esr_elx to die() (git-fixes) - arm64: die(): pass 'err' as long (git-fixes) - arm64: factor insn read out of call_undef_hook() (git-fixes) - arm64: factor out el1 ssbs emulation hook (git-fixes) - arm64: report el1 undefs better (git-fixes) - arm64: rework bti exception handling (git-fixes) - arm64: rework el0 mrs emulation (git-fixes) - arm64: rework fpac exception handling (git-fixes) - arm64: split el0/el1 undef handlers (git-fixes) - arm: 9321/1: memset: cast the constant byte to unsigned char (git-fixes). - asoc: ams-delta.c: use component after check (git-fixes). - asoc: codecs: wsa-macro: fix uninitialized stack variables with name prefix (git-fixes). - asoc: cs35l41: undo runtime pm changes at driver exit time (git-fixes). - asoc: cs35l41: verify pm runtime resume errors in irq handler (git-fixes). - asoc: fsl: fix pm disable depth imbalance in fsl_easrc_probe (git-fixes). - asoc: fsl: mpc5200_dma.c: fix warning of function parameter or member not described (git-fixes). - asoc: hdmi-codec: register hpd callback on component probe (git-fixes). - asoc: intel: skylake: fix mem leak when parsing uuids fails (git-fixes). - asoc: rt5650: fix the wrong result of key button (git-fixes). - asoc: simple-card: fixup asoc_simple_probe() error handling (git-fixes). - asoc: sof: core: ensure sof_ops_free() is still called when probe never ran (git-fixes). - asoc: ti: omap-mcbsp: fix runtime pm underflow warnings (git-fixes). - ata: pata_isapnp: add missing error check for devm_ioport_map() (git-fixes). - atl1c: work around the dma rx overflow issue (git-fixes). - atm: iphase: do pci error checks on own line (git-fixes). - blk-mq: do not clear driver tags own mapping (bsc#1217366). - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (bsc#1217366). - bluetooth: add device 0bda:887b to device tables (git-fixes). - bluetooth: add device 13d3:3571 to device tables (git-fixes). - bluetooth: btusb: add 0bda:b85b for fn-link rtl8852be (git-fixes). - bluetooth: btusb: add date->evt_skb is null check (git-fixes). - bluetooth: btusb: add realtek rtl8852be support id 0x0cb8:0xc559 (git-fixes). - bluetooth: btusb: add rtw8852be device 13d3:3570 to device tables (git-fixes). - btrfs: always log symlinks in full mode (bsc#1214840). - can: dev: can_put_echo_skb(): do not crash kernel if can_priv::echo_skb is accessed out of bounds (git-fixes). - can: dev: can_restart(): do not crash kernel if carrier is ok (git-fixes). - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (git-fixes). - can: isotp: add local echo tx processing for consecutive frames (git-fixes). - can: isotp: fix race between isotp_sendsmg() and isotp_release() (git-fixes). - can: isotp: fix tx state handling for echo tx processing (git-fixes). - can: isotp: handle wait_event_interruptible() return values (git-fixes). - can: isotp: isotp_bind(): return -einval on incorrect can id formatting (git-fixes). - can: isotp: isotp_sendmsg(): fix tx state detection and wait behavior (git-fixes). - can: isotp: remove re-binding of bound socket (git-fixes). - can: isotp: sanitize can id checks in isotp_bind() (git-fixes). - can: isotp: set max pdu size to 64 kbyte (git-fixes). - can: isotp: split tx timer into transmission and timeout (git-fixes). - can: sja1000: fix comment (git-fixes). - clk: imx: imx8mq: correct error handling path (git-fixes). - clk: imx: imx8qxp: fix elcdif_pll clock (git-fixes). - clk: imx: select mxc_clk for clk_imx8qxp (git-fixes). - clk: keystone: pll: fix a couple null vs is_err() checks (git-fixes). - clk: mediatek: clk-mt2701: add check for mtk_alloc_clk_data (git-fixes). - clk: mediatek: clk-mt6765: add check for mtk_alloc_clk_data (git-fixes). - clk: mediatek: clk-mt6779: add check for mtk_alloc_clk_data (git-fixes). - clk: mediatek: clk-mt6797: add check for mtk_alloc_clk_data (git-fixes). - clk: mediatek: clk-mt7629-eth: add check for mtk_alloc_clk_data (git-fixes). - clk: mediatek: clk-mt7629: add check for mtk_alloc_clk_data (git-fixes). - clk: npcm7xx: fix inco

Есть исправление

Опубликовано

2023-12-12T14:14:52Z

Обновлено

2026-02-04T03:49:09.977421Z

Стек: system

Проверьте свой сервер →