Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:1892-1 Final 1 1 2023-07-06T01:58:50Z current 2023-07-06T01:58:50Z 2023-07-06T01:58:50Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-28772: Fixed buffer overflow in seq_buf_putmem_hex in lib/seq_buf.c (bsc#1209549). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2023-28464: Fixed use-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052). - CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168). - CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366). - CVE-2021-3923: Fixed stack information leak vulnerability that could lead to kernel protection bypass in infiniband RDMA (bsc#1209778). - CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1209289). - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635). - CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634). - CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636). - CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290). - CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256). - CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288). - CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291). - CVE-2023-1078: Fixed a heap out-of-bounds write in rds_rm_zerocopy_callback (bsc#1208601). - CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598). - CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547). The following non-security bugs were fixed: - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (bsc#1207168). - net: ena: optimize data access in fast-path code (bsc#1208137). - PCI: hv: Add a per-bus mutex state_lock (bsc#1209785). - PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1209785). - PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1209785). - PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1209785). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-1892,SUSE-SLE-Module-RT-15-SP3-2023-1892,SUSE-SUSE-MicroOS-5.1-2023-1892,SUSE-SUSE-MicroOS-5.2-2023-1892 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ Link for SUSE-SU-2023:1892-1 https://lists.suse.com/pipermail/sle-updates/2023-April/028848.html E-Mail link for SUSE-SU-2023:1892-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1207168 SUSE Bug 1207168 https://bugzilla.suse.com/1208137 SUSE Bug 1208137 https://bugzilla.suse.com/1208598 SUSE Bug 1208598 https://bugzilla.suse.com/1208601 SUSE Bug 1208601 https://bugzilla.suse.com/1208787 SUSE Bug 1208787 https://bugzilla.suse.com/1209052 SUSE Bug 1209052 https://bugzilla.suse.com/1209256 SUSE Bug 1209256 https://bugzilla.suse.com/1209288 SUSE Bug 1209288 https://bugzilla.suse.com/1209289 SUSE Bug 1209289 https://bugzilla.suse.com/1209290 SUSE Bug 1209290 https://bugzilla.suse.com/1209291 SUSE Bug 1209291 https://bugzilla.suse.com/1209366 SUSE Bug 1209366 https://bugzilla.suse.com/1209532 SUSE Bug 1209532 https://bugzilla.suse.com/1209547 SUSE Bug 1209547 https://bugzilla.suse.com/1209549 SUSE Bug 1209549 https://bugzilla.suse.com/1209634 SUSE Bug 1209634 https://bugzilla.suse.com/1209635 SUSE Bug 1209635 https://bugzilla.suse.com/1209636 SUSE Bug 1209636 https://bugzilla.suse.com/1209778 SUSE Bug 1209778 https://bugzilla.suse.com/1209785 SUSE Bug 1209785 https://www.suse.com/security/cve/CVE-2017-5753/ SUSE CVE CVE-2017-5753 page https://www.suse.com/security/cve/CVE-2021-3923/ SUSE CVE CVE-2021-3923 page https://www.suse.com/security/cve/CVE-2022-4744/ SUSE CVE CVE-2022-4744 page https://www.suse.com/security/cve/CVE-2023-0394/ SUSE CVE CVE-2023-0394 page https://www.suse.com/security/cve/CVE-2023-0461/ SUSE CVE CVE-2023-0461 page https://www.suse.com/security/cve/CVE-2023-1075/ SUSE CVE CVE-2023-1075 page https://www.suse.com/security/cve/CVE-2023-1078/ SUSE CVE CVE-2023-1078 page https://www.suse.com/security/cve/CVE-2023-1281/ SUSE CVE CVE-2023-1281 page https://www.suse.com/security/cve/CVE-2023-1382/ SUSE CVE CVE-2023-1382 page https://www.suse.com/security/cve/CVE-2023-1390/ SUSE CVE CVE-2023-1390 page https://www.suse.com/security/cve/CVE-2023-1513/ SUSE CVE CVE-2023-1513 page https://www.suse.com/security/cve/CVE-2023-1582/ SUSE CVE CVE-2023-1582 page https://www.suse.com/security/cve/CVE-2023-28327/ SUSE CVE CVE-2023-28327 page https://www.suse.com/security/cve/CVE-2023-28328/ SUSE CVE CVE-2023-28328 page https://www.suse.com/security/cve/CVE-2023-28464/ SUSE CVE CVE-2023-28464 page https://www.suse.com/security/cve/CVE-2023-28466/ SUSE CVE CVE-2023-28466 page https://www.suse.com/security/cve/CVE-2023-28772/ SUSE CVE CVE-2023-28772 page SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Real Time Module 15 SP3 cluster-md-kmp-rt-5.3.18-150300.124.1 cluster-md-kmp-rt_debug-5.3.18-150300.124.1 dlm-kmp-rt-5.3.18-150300.124.1 dlm-kmp-rt_debug-5.3.18-150300.124.1 gfs2-kmp-rt-5.3.18-150300.124.1 gfs2-kmp-rt_debug-5.3.18-150300.124.1 kernel-devel-rt-5.3.18-150300.124.1 kernel-rt-5.3.18-150300.124.1 kernel-rt-devel-5.3.18-150300.124.1 kernel-rt-extra-5.3.18-150300.124.1 kernel-rt-livepatch-devel-5.3.18-150300.124.1 kernel-rt-optional-5.3.18-150300.124.1 kernel-rt_debug-5.3.18-150300.124.1 kernel-rt_debug-devel-5.3.18-150300.124.1 kernel-rt_debug-extra-5.3.18-150300.124.1 kernel-rt_debug-livepatch-devel-5.3.18-150300.124.1 kernel-rt_debug-optional-5.3.18-150300.124.1 kernel-source-rt-5.3.18-150300.124.1 kernel-syms-rt-5.3.18-150300.124.1 kselftests-kmp-rt-5.3.18-150300.124.1 kselftests-kmp-rt_debug-5.3.18-150300.124.1 ocfs2-kmp-rt-5.3.18-150300.124.1 ocfs2-kmp-rt_debug-5.3.18-150300.124.1 reiserfs-kmp-rt-5.3.18-150300.124.1 reiserfs-kmp-rt_debug-5.3.18-150300.124.1 kernel-rt-5.3.18-150300.124.1 as a component of SUSE Linux Enterprise Micro 5.1 kernel-rt-5.3.18-150300.124.1 as a component of SUSE Linux Enterprise Micro 5.2 cluster-md-kmp-rt-5.3.18-150300.124.1 as a component of SUSE Real Time Module 15 SP3 dlm-kmp-rt-5.3.18-150300.124.1 as a component of SUSE Real Time Module 15 SP3 gfs2-kmp-rt-5.3.18-150300.124.1 as a component of SUSE Real Time Module 15 SP3 kernel-devel-rt-5.3.18-150300.124.1 as a component of SUSE Real Time Module 15 SP3 kernel-rt-5.3.18-150300.124.1 as a component of SUSE Real Time Module 15 SP3 kernel-rt-devel-5.3.18-150300.124.1 as a component of SUSE Real Time Module 15 SP3 kernel-rt_debug-devel-5.3.18-150300.124.1 as a component of SUSE Real Time Module 15 SP3 kernel-source-rt-5.3.18-150300.124.1 as a component of SUSE Real Time Module 15 SP3 kernel-syms-rt-5.3.18-150300.124.1 as a component of SUSE Real Time Module 15 SP3 ocfs2-kmp-rt-5.3.18-150300.124.1 as a component of SUSE Real Time Module 15 SP3 Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. CVE-2017-5753 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 important 4.9 AV:L/AC:L/Au:N/C:C/I:N/A:N 4.7 AV:L/AC:M/Au:N/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2017-5753.html CVE-2017-5753 https://bugzilla.suse.com/1068032 SUSE Bug 1068032 https://bugzilla.suse.com/1074562 SUSE Bug 1074562 https://bugzilla.suse.com/1074578 SUSE Bug 1074578 https://bugzilla.suse.com/1074701 SUSE Bug 1074701 https://bugzilla.suse.com/1075006 SUSE Bug 1075006 https://bugzilla.suse.com/1075419 SUSE Bug 1075419 https://bugzilla.suse.com/1075748 SUSE Bug 1075748 https://bugzilla.suse.com/1080039 SUSE Bug 1080039 https://bugzilla.suse.com/1087084 SUSE Bug 1087084 https://bugzilla.suse.com/1087939 SUSE Bug 1087939 https://bugzilla.suse.com/1089055 SUSE Bug 1089055 https://bugzilla.suse.com/1136865 SUSE Bug 1136865 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 https://bugzilla.suse.com/1209547 SUSE Bug 1209547 A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms. CVE-2021-3923 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2021-3923.html CVE-2021-3923 https://bugzilla.suse.com/1209778 SUSE Bug 1209778 A double-free flaw was found in the Linux kernel's TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2022-4744 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2022-4744.html CVE-2022-4744 https://bugzilla.suse.com/1209635 SUSE Bug 1209635 https://bugzilla.suse.com/1209672 SUSE Bug 1209672 https://bugzilla.suse.com/1211833 SUSE Bug 1211833 A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash. CVE-2023-0394 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-0394.html CVE-2023-0394 https://bugzilla.suse.com/1207168 SUSE Bug 1207168 There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege. There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock. When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable. The setsockopt TCP_ULP operation does not require any privilege. We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c CVE-2023-0461 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-0461.html CVE-2023-0461 https://bugzilla.suse.com/1208787 SUSE Bug 1208787 https://bugzilla.suse.com/1208911 SUSE Bug 1208911 https://bugzilla.suse.com/1211833 SUSE Bug 1211833 https://bugzilla.suse.com/1217079 SUSE Bug 1217079 https://bugzilla.suse.com/1218514 SUSE Bug 1218514 A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field that overlaps with rec->tx_ready. CVE-2023-1075 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-1075.html CVE-2023-1075 https://bugzilla.suse.com/1208598 SUSE Bug 1208598 A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption. CVE-2023-1078 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-1078.html CVE-2023-1078 https://bugzilla.suse.com/1208601 SUSE Bug 1208601 https://bugzilla.suse.com/1208603 SUSE Bug 1208603 Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root. This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2. CVE-2023-1281 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-1281.html CVE-2023-1281 https://bugzilla.suse.com/1209634 SUSE Bug 1209634 https://bugzilla.suse.com/1209683 SUSE Bug 1209683 https://bugzilla.suse.com/1210335 SUSE Bug 1210335 https://bugzilla.suse.com/1210423 SUSE Bug 1210423 https://bugzilla.suse.com/1211833 SUSE Bug 1211833 A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to a NULL pointer dereference when accessing con->sock->sk in net/tipc/topsrv.c in the tipc protocol in the Linux kernel. CVE-2023-1382 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-1382.html CVE-2023-1382 https://bugzilla.suse.com/1209288 SUSE Bug 1209288 A remote denial of service vulnerability was found in the Linux kernel's TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition. CVE-2023-1390 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-1390.html CVE-2023-1390 https://bugzilla.suse.com/1209289 SUSE Bug 1209289 https://bugzilla.suse.com/1210779 SUSE Bug 1210779 https://bugzilla.suse.com/1211495 SUSE Bug 1211495 A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak. CVE-2023-1513 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-1513.html CVE-2023-1513 https://bugzilla.suse.com/1209532 SUSE Bug 1209532 A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user privilege to cause a denial of service. CVE-2023-1582 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-1582.html CVE-2023-1582 https://bugzilla.suse.com/1209636 SUSE Bug 1209636 A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service. CVE-2023-28327 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-28327.html CVE-2023-28327 https://bugzilla.suse.com/1209290 SUSE Bug 1209290 A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of service. CVE-2023-28328 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-28328.html CVE-2023-28328 https://bugzilla.suse.com/1209291 SUSE Bug 1209291 https://bugzilla.suse.com/1222212 SUSE Bug 1222212 hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escalation. CVE-2023-28464 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-28464.html CVE-2023-28464 https://bugzilla.suse.com/1209052 SUSE Bug 1209052 https://bugzilla.suse.com/1211111 SUSE Bug 1211111 https://bugzilla.suse.com/1220130 SUSE Bug 1220130 do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference). CVE-2023-28466 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-28466.html CVE-2023-28466 https://bugzilla.suse.com/1209366 SUSE Bug 1209366 https://bugzilla.suse.com/1210452 SUSE Bug 1210452 https://bugzilla.suse.com/1211833 SUSE Bug 1211833 https://bugzilla.suse.com/1213841 SUSE Bug 1213841 An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow. CVE-2023-28772 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.124.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.124.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.124.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231892-1/ https://www.suse.com/security/cve/CVE-2023-28772.html CVE-2023-28772 https://bugzilla.suse.com/1209549 SUSE Bug 1209549 https://bugzilla.suse.com/1211110 SUSE Bug 1211110 https://bugzilla.suse.com/1214378 SUSE Bug 1214378