Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:2502-1 Final 1 1 2023-06-13T15:39:53Z current 2023-06-13T15:39:53Z 2023-06-13T15:39:53Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2022-3566: Fixed race condition in the TCP Handler (bsc#1204405). - CVE-2020-36694: Fixed an use-after-free issue in netfilter in the packet processing context (bsc#1211596). - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). - CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590). - CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760). - CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758). - CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762). - CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803). - CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756). - CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783). - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940 bsc#1211260). - CVE-2023-2194: Fixed an out-of-bounds write vulnerability in the SLIMpro I2C device driver (bsc#1210715). - CVE-2023-32269: Fixed a use-after-free in af_netrom.c, related to the fact that accept() was also allowed for a successfully connected AF_NETROM socket (bsc#1211186). - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043). - CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024). - CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287). - CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105). - CVE-2023-2483: Fixed a use after free bug in emac_remove due caused by a race condition (bsc#1211037). - CVE-2023-23586: Fixed a memory information leak in the io_uring subsystem (bsc#1208474). The following non-security bugs were fixed: - Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622). - SUNRPC: Ensure the transport backchannel association (bsc#1211203). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - s390,dcssblk,dax: Add dax zero_page_range operation to dcssblk driver (bsc#1199636). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-2502,SUSE-SLE-Module-RT-15-SP3-2023-2502,SUSE-SUSE-MicroOS-5.1-2023-2502,SUSE-SUSE-MicroOS-5.2-2023-2502 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ Link for SUSE-SU-2023:2502-1 https://lists.suse.com/pipermail/sle-updates/2023-June/029842.html E-Mail link for SUSE-SU-2023:2502-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1199636 SUSE Bug 1199636 https://bugzilla.suse.com/1204405 SUSE Bug 1204405 https://bugzilla.suse.com/1205756 SUSE Bug 1205756 https://bugzilla.suse.com/1205758 SUSE Bug 1205758 https://bugzilla.suse.com/1205760 SUSE Bug 1205760 https://bugzilla.suse.com/1205762 SUSE Bug 1205762 https://bugzilla.suse.com/1205803 SUSE Bug 1205803 https://bugzilla.suse.com/1206024 SUSE Bug 1206024 https://bugzilla.suse.com/1208474 SUSE Bug 1208474 https://bugzilla.suse.com/1208604 SUSE Bug 1208604 https://bugzilla.suse.com/1209287 SUSE Bug 1209287 https://bugzilla.suse.com/1209779 SUSE Bug 1209779 https://bugzilla.suse.com/1210715 SUSE Bug 1210715 https://bugzilla.suse.com/1210783 SUSE Bug 1210783 https://bugzilla.suse.com/1210940 SUSE Bug 1210940 https://bugzilla.suse.com/1211037 SUSE Bug 1211037 https://bugzilla.suse.com/1211043 SUSE Bug 1211043 https://bugzilla.suse.com/1211105 SUSE Bug 1211105 https://bugzilla.suse.com/1211131 SUSE Bug 1211131 https://bugzilla.suse.com/1211186 SUSE Bug 1211186 https://bugzilla.suse.com/1211203 SUSE Bug 1211203 https://bugzilla.suse.com/1211590 SUSE Bug 1211590 https://bugzilla.suse.com/1211592 SUSE Bug 1211592 https://bugzilla.suse.com/1211596 SUSE Bug 1211596 https://bugzilla.suse.com/1211622 SUSE Bug 1211622 https://www.suse.com/security/cve/CVE-2020-36694/ SUSE CVE CVE-2020-36694 page https://www.suse.com/security/cve/CVE-2022-3566/ SUSE CVE CVE-2022-3566 page https://www.suse.com/security/cve/CVE-2022-4269/ SUSE CVE CVE-2022-4269 page https://www.suse.com/security/cve/CVE-2022-45884/ SUSE CVE CVE-2022-45884 page https://www.suse.com/security/cve/CVE-2022-45885/ SUSE CVE CVE-2022-45885 page https://www.suse.com/security/cve/CVE-2022-45886/ SUSE CVE CVE-2022-45886 page https://www.suse.com/security/cve/CVE-2022-45887/ SUSE CVE CVE-2022-45887 page https://www.suse.com/security/cve/CVE-2022-45919/ SUSE CVE CVE-2022-45919 page https://www.suse.com/security/cve/CVE-2023-1079/ SUSE CVE CVE-2023-1079 page https://www.suse.com/security/cve/CVE-2023-1380/ SUSE CVE CVE-2023-1380 page https://www.suse.com/security/cve/CVE-2023-1637/ SUSE CVE CVE-2023-1637 page https://www.suse.com/security/cve/CVE-2023-2156/ SUSE CVE CVE-2023-2156 page https://www.suse.com/security/cve/CVE-2023-2194/ SUSE CVE CVE-2023-2194 page https://www.suse.com/security/cve/CVE-2023-23586/ SUSE CVE CVE-2023-23586 page https://www.suse.com/security/cve/CVE-2023-2483/ SUSE CVE CVE-2023-2483 page https://www.suse.com/security/cve/CVE-2023-2513/ SUSE CVE CVE-2023-2513 page https://www.suse.com/security/cve/CVE-2023-31084/ SUSE CVE CVE-2023-31084 page https://www.suse.com/security/cve/CVE-2023-31436/ SUSE CVE CVE-2023-31436 page https://www.suse.com/security/cve/CVE-2023-32233/ SUSE CVE CVE-2023-32233 page https://www.suse.com/security/cve/CVE-2023-32269/ SUSE CVE CVE-2023-32269 page https://www.suse.com/security/cve/CVE-2023-33288/ SUSE CVE CVE-2023-33288 page SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Real Time Module 15 SP3 cluster-md-kmp-rt-5.3.18-150300.130.1 cluster-md-kmp-rt_debug-5.3.18-150300.130.1 dlm-kmp-rt-5.3.18-150300.130.1 dlm-kmp-rt_debug-5.3.18-150300.130.1 gfs2-kmp-rt-5.3.18-150300.130.1 gfs2-kmp-rt_debug-5.3.18-150300.130.1 kernel-devel-rt-5.3.18-150300.130.1 kernel-rt-5.3.18-150300.130.1 kernel-rt-devel-5.3.18-150300.130.1 kernel-rt-extra-5.3.18-150300.130.1 kernel-rt-livepatch-devel-5.3.18-150300.130.1 kernel-rt-optional-5.3.18-150300.130.1 kernel-rt_debug-5.3.18-150300.130.1 kernel-rt_debug-devel-5.3.18-150300.130.1 kernel-rt_debug-extra-5.3.18-150300.130.1 kernel-rt_debug-livepatch-devel-5.3.18-150300.130.1 kernel-rt_debug-optional-5.3.18-150300.130.1 kernel-source-rt-5.3.18-150300.130.1 kernel-syms-rt-5.3.18-150300.130.1 kselftests-kmp-rt-5.3.18-150300.130.1 kselftests-kmp-rt_debug-5.3.18-150300.130.1 ocfs2-kmp-rt-5.3.18-150300.130.1 ocfs2-kmp-rt_debug-5.3.18-150300.130.1 reiserfs-kmp-rt-5.3.18-150300.130.1 reiserfs-kmp-rt_debug-5.3.18-150300.130.1 kernel-rt-5.3.18-150300.130.1 as a component of SUSE Linux Enterprise Micro 5.1 kernel-rt-5.3.18-150300.130.1 as a component of SUSE Linux Enterprise Micro 5.2 cluster-md-kmp-rt-5.3.18-150300.130.1 as a component of SUSE Real Time Module 15 SP3 dlm-kmp-rt-5.3.18-150300.130.1 as a component of SUSE Real Time Module 15 SP3 gfs2-kmp-rt-5.3.18-150300.130.1 as a component of SUSE Real Time Module 15 SP3 kernel-devel-rt-5.3.18-150300.130.1 as a component of SUSE Real Time Module 15 SP3 kernel-rt-5.3.18-150300.130.1 as a component of SUSE Real Time Module 15 SP3 kernel-rt-devel-5.3.18-150300.130.1 as a component of SUSE Real Time Module 15 SP3 kernel-rt_debug-devel-5.3.18-150300.130.1 as a component of SUSE Real Time Module 15 SP3 kernel-source-rt-5.3.18-150300.130.1 as a component of SUSE Real Time Module 15 SP3 kernel-syms-rt-5.3.18-150300.130.1 as a component of SUSE Real Time Module 15 SP3 ocfs2-kmp-rt-5.3.18-150300.130.1 as a component of SUSE Real Time Module 15 SP3 An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet processing context, because the per-CPU sequence count is mishandled during concurrent iptables rules replacement. This could be exploited with the CAP_NET_ADMIN capability in an unprivileged namespace. NOTE: cc00bca was reverted in 5.12. CVE-2020-36694 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2020-36694.html CVE-2020-36694 https://bugzilla.suse.com/1211596 SUSE Bug 1211596 A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. The identifier VDB-211089 was assigned to this vulnerability. CVE-2022-3566 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2022-3566.html CVE-2022-3566 https://bugzilla.suse.com/1204405 SUSE Bug 1204405 A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition. CVE-2022-4269 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2022-4269.html CVE-2022-4269 https://bugzilla.suse.com/1206024 SUSE Bug 1206024 An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops. CVE-2022-45884 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2022-45884.html CVE-2022-45884 https://bugzilla.suse.com/1205756 SUSE Bug 1205756 An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a device is disconnected. CVE-2022-45885 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2022-45885.html CVE-2022-45885 https://bugzilla.suse.com/1205758 SUSE Bug 1205758 An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads to a use-after-free. CVE-2022-45886 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2022-45886.html CVE-2022-45886 https://bugzilla.suse.com/1205760 SUSE Bug 1205760 An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_detach call. CVE-2022-45887 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2022-45887.html CVE-2022-45887 https://bugzilla.suse.com/1205762 SUSE Bug 1205762 https://bugzilla.suse.com/1220015 SUSE Bug 1220015 An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free can occur is there is a disconnect after an open, because of the lack of a wait_event. CVE-2022-45919 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2022-45919.html CVE-2022-45919 https://bugzilla.suse.com/1205803 SUSE Bug 1205803 https://bugzilla.suse.com/1208600 SUSE Bug 1208600 https://bugzilla.suse.com/1208912 SUSE Bug 1208912 https://bugzilla.suse.com/1214128 SUSE Bug 1214128 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the work_struct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data. CVE-2023-1079 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-1079.html CVE-2023-1079 https://bugzilla.suse.com/1208604 SUSE Bug 1208604 A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service. CVE-2023-1380 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-1380.html CVE-2023-1380 https://bugzilla.suse.com/1209287 SUSE Bug 1209287 A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks. CVE-2023-1637 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-1637.html CVE-2023-1637 https://bugzilla.suse.com/1209779 SUSE Bug 1209779 A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system. CVE-2023-2156 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-2156.html CVE-2023-2156 https://bugzilla.suse.com/1211131 SUSE Bug 1211131 https://bugzilla.suse.com/1211395 SUSE Bug 1211395 An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->block[0]" variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to crash the system or potentially achieve code execution. CVE-2023-2194 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-2194.html CVE-2023-2194 https://bugzilla.suse.com/1210715 SUSE Bug 1210715 Due to a vulnerability in the io_uring subsystem, it is possible to leak kernel memory information to the user process. timens_install calls current_is_single_threaded to determine if the current process is single-threaded, but this call does not consider io_uring's io_worker threads, thus it is possible to insert a time namespace's vvar page to process's memory space via a page fault. When this time namespace is destroyed, the vvar page is also freed, but not removed from the process' memory, and a next page allocated by the kernel will be still available from the user-space process and can leak memory contents via this (read-only) use-after-free vulnerability. We recommend upgrading past version 5.10.161 or commit 788d0824269bef539fe31a785b1517882eafed93 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring CVE-2023-23586 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-23586.html CVE-2023-23586 https://bugzilla.suse.com/1208474 SUSE Bug 1208474 DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-33203. Reason: This candidate is a reservation duplicate of CVE-2023-33203. Notes: All CVE users should reference CVE-2023-33203 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. CVE-2023-2483 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-2483.html CVE-2023-2483 https://bugzilla.suse.com/1211037 SUSE Bug 1211037 A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors. CVE-2023-2513 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-2513.html CVE-2023-2513 https://bugzilla.suse.com/1211105 SUSE Bug 1211105 An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&fepriv->sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&fepriv->sem) may block the process. CVE-2023-31084 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-31084.html CVE-2023-31084 https://bugzilla.suse.com/1210783 SUSE Bug 1210783 qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX. CVE-2023-31436 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-31436.html CVE-2023-31436 https://bugzilla.suse.com/1210940 SUSE Bug 1210940 https://bugzilla.suse.com/1211260 SUSE Bug 1211260 https://bugzilla.suse.com/1213841 SUSE Bug 1213841 https://bugzilla.suse.com/1213842 SUSE Bug 1213842 https://bugzilla.suse.com/1214128 SUSE Bug 1214128 https://bugzilla.suse.com/1223091 SUSE Bug 1223091 https://bugzilla.suse.com/1224419 SUSE Bug 1224419 In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled. CVE-2023-32233 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-32233.html CVE-2023-32233 https://bugzilla.suse.com/1211043 SUSE Bug 1211043 https://bugzilla.suse.com/1211187 SUSE Bug 1211187 An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAP_NET_ADMIN capability. CVE-2023-32269 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-32269.html CVE-2023-32269 https://bugzilla.suse.com/1211186 SUSE Bug 1211186 An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition. CVE-2023-33288 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.130.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.130.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.130.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232502-1/ https://www.suse.com/security/cve/CVE-2023-33288.html CVE-2023-33288 https://bugzilla.suse.com/1211590 SUSE Bug 1211590