1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2023:2156-1

[SUSE-SU-2023:2156-1] Security update for the Linux Kernel

Severity Important
CVEs 8
Info References Vulnerabilities

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498).
  • CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
  • CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647).
  • CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
  • CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).
  • CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
  • CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
  • CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).

The following non-security bugs were fixed:

  • ath10k: Fix error handling in case of CE pipe init failure (git-fixes).
  • ath10k: Fix missing frame timestamp for beacon/probe-resp (git-fixes).
  • ath10k: Fix the parsing error in service available event (git-fixes).
  • ath10k: add missing error return code in ath10k_pci_probe() (git-fixes).
  • ath10k: fix control-message timeout (git-fixes).
  • ath10k: fix division by zero in send path (git-fixes).
  • ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern (git-fixes).
  • audit: improve audit queue handling when 'audit=1' on cmdline (bsc#1209969).
  • bpf, x86: Fix encoding for lower 8-bit registers in BPF_STX BPF_B (git-fixes).
  • cachefiles: Drop superfluous readpages aops NULL check (bsc#1210430).
  • cachefiles: Fix page leak in cachefiles_read_backing_file while vmscan is active (bsc#1210430).
  • cachefiles: Fix race between read_waiter and read_copier involving op->to_do (bsc#1210430).
  • cachefiles: Handle readpage error correctly (bsc#1210430).
  • cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827).
  • cifs: fix negotiate context parsing (bsc#1210301).
  • cifs: fix open leaks in open_cached_dir() (bsc#1209342).
  • cred: allow get_cred() and put_cred() to be given NULL (bsc#1209887).
  • crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes).
  • drivers: net: lmc: fix case value for target abort error (git-fixes).
  • fscache, cachefiles: remove redundant variable 'cache' (bsc#1210430).
  • ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
  • intel_pmc_ipc: restore ability to call functions with irq enabled (git-fixes).
  • ipmi: fix SSIF not responding under certain cond (git-fixes).
  • iwlwifi: Fix -EIO error code that is never returned (git-fixes).
  • iwlwifi: fw: make pos static in iwl_sar_get_ewrd_table() loop (git-fixes).
  • iwlwifi: pcie: fix locking when 'HW not ready' (git-fixes).
  • iwlwifi: pcie: gen2: fix locking when 'HW not ready' (git-fixes).
  • iwlwifi: pcie: reschedule in long-running memory reads (git-fixes).
  • kabi/severities: ignore KABI for NVMe, except nvme-fc (bsc#1174777).
  • kcm: Only allow TCP sockets to be attached to a KCM mux (git-fixes).
  • keys: Change keyring_serialise_link_sem to a mutex (bsc#1207088).
  • keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).
  • keys: Hoist locking out of __key_link_begin() (bsc#1207088).
  • kretprobe: Prevent triggering kretprobe from within kprobe_flush_task (git-fixes).
  • l2tp: clean up stale tunnel or session in pppol2tp_connect's error path (git-fixes).
  • l2tp: fix pseudo-wire type for sessions created by pppol2tp_connect() (git-fixes).
  • l2tp: reject creation of non-PPP sessions on L2TPv2 tunnels (git-fixes).
  • net/ncsi: Do not return error on normal response (git-fixes).
  • net: axienet: Fix double deregister of mdio (git-fixes).
  • net: core: dst: Add kernel-doc for 'net' parameter (git-fixes).
  • net: core: dst_cache_set_ip6: Rename 'addr' parameter to 'saddr' for consistency (git-fixes).
  • net: phy: realtek: Use the dummy stubs for MMD register access for rtl8211b (git-fixes).
  • net: prevent ISA drivers from building on PPC32 (git-fixes).
  • net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes).
  • netfilter: nft_set_rbtree: fix parameter of __nft_rbtree_lookup() (git-fixes).
  • netfilter: x_tables: Add note about how to free percpu counters (git-fixes).
  • nvme-pci: do not WARN_ON in nvme_reset_work if ctrl.state is not RESETTING (git-fixes).
  • nvme-pci: fix doorbell buffer value endianness (git-fixes).
  • nvme: retain split access workaround for capability reads (git-fixes).
  • platform/x86: intel_pmc_ipc: Use devm_* calls in driver probe function (git-fixes).
  • platform/x86: intel_pmc_ipc: Use spin_lock to protect GCR updates (git-fixes).
  • powercap: fix possible name leak in powercap_register_zone() (git-fixes).
  • powerpc/numa: Consider the max NUMA node for migratable LPAR (bsc#1209999 ltc#202140 bsc#1190544 ltc#194520 bsc#1142685 ltc#179509 git-fixes).
  • powerpc/numa: Detect support for coregroup (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
  • powerpc/numa: Limit possible nodes to within num_possible_nodes (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
  • powerpc/numa: Restrict possible nodes based on platform (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
  • powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
  • powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
  • powerpc/pseries: Rename TYPE1_AFFINITY to FORM1_AFFINITY (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
  • powerpc/pseries: rename min_common_depth to primary_domain_index (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
  • printk: Give error on attempt to set log buffer length to over 2G (bsc#1210534).
  • ring-buffer: Fix race while reader and writer are on the same page (git-fixes).
  • s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes).
  • scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes).
  • scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes).
  • sctp: do not free asoc when it is already dead in sctp_sendmsg (git-fixes).
  • sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf (git-fixes).
  • sctp: use the right sk after waking up from wait_buf sleep (git-fixes).
  • struct ci_hdrc: hide new member at end (git-fixes).
  • struct wmi_svc_avail_ev_arg: new member to end (git-fixes).
  • tuntap: fix dividing by zero in ebpf queue selection (git-fixes).
  • usb/ohci-platform: Fix a warning when hibernating (git-fixes).
  • usb: chipidea: core: fix possible concurrent when switch role (git-fixes).
  • usb: dwc3: core: fix kernel panic when do reboot (git-fixes).
  • usb: dwc3: gadget: Do not set IMI for no_interrupt (git-fixes).
  • usb: host: ohci-pxa27x: Fix and & vs | typo (git-fixes).
  • usb: storage: Add check for kcalloc (git-fixes).
  • usb: typec: Check for ops->exit instead of ops->enter in altmode_exit (git-fixes).
  • watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes).
  • wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes).
  • workqueue: Fix missing kfree(rescuer) in destroy_workqueue() (bsc#1210460).
  • workqueue: Fix spurious sanity check failures in destroy_workqueue() (bsc#1210460).
  • wq: handle VM suspension in stall detection (bsc#1210466).
  • x86/boot/compressed: Disable relocation relaxation (git-fixes).
  • x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (git-fixes).
  • x86/bugs: Add Cannon lake to RETBleed affected CPU list (git-fixes).
  • x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
  • x86/fpu: Prevent FPU state corruption (git-fixes).
  • x86/irq: Ensure PI wakeup handler is unregistered before module unload (git-fixes).
  • x86/kprobes: Fix to check non boostable prefixes correctly (git-fixes).
  • x86/kprobes: Restore BTF if the single-stepping is cancelled (git-fixes).
  • x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
  • x86/mm: Stop printing BRK addresses (git-fixes).
  • x86/pkeys: Add check for pkey 'overflow' (git-fixes).
  • x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline (git-fixes).
  • x86/tools/relocs: Fix non-POSIX regexp (git-fixes).
  • x86/tools: Fix objdump version check again (git-fixes).
  • x86/virt: Eat faults on VMXOFF in reboot flows (git-fixes).
  • x86/virt: Mark flags and memory as clobbered by VMXOFF (git-fixes).
  • x86: Do not let pgprot_modify() change the page encryption bit (git-fixes).
  • x86_64: Fix jiffies ODR violation (git-fixes).
  • xfrm: policy: use hlist rcu variants on insert (git-fixes).
  • xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes).
  • xhci: hide include of iommu.h (git-fixes).
ID
SUSE-SU-2023:2156-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2023/suse-su-20232156-1/
Published
2023-05-10T11:17:54
(16 months ago)
Modified
2023-05-10T11:17:54
(16 months ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Source # ID Name URL
Suse SUSE ratings https://www.suse.com/support/security/rating/
Suse URL of this CSAF notice https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_2156-1.json
Suse URL for SUSE-SU-2023:2156-1 https://www.suse.com/support/update/announcement/2023/suse-su-20232156-1/
Suse E-Mail link for SUSE-SU-2023:2156-1 https://lists.suse.com/pipermail/sle-updates/2023-May/029317.html
Bugzilla SUSE Bug 1142685 https://bugzilla.suse.com/1142685
Bugzilla SUSE Bug 1174777 https://bugzilla.suse.com/1174777
Bugzilla SUSE Bug 1190544 https://bugzilla.suse.com/1190544
Bugzilla SUSE Bug 1202353 https://bugzilla.suse.com/1202353
Bugzilla SUSE Bug 1207088 https://bugzilla.suse.com/1207088
Bugzilla SUSE Bug 1209342 https://bugzilla.suse.com/1209342
Bugzilla SUSE Bug 1209871 https://bugzilla.suse.com/1209871
Bugzilla SUSE Bug 1209887 https://bugzilla.suse.com/1209887
Bugzilla SUSE Bug 1209969 https://bugzilla.suse.com/1209969
Bugzilla SUSE Bug 1209999 https://bugzilla.suse.com/1209999
Bugzilla SUSE Bug 1210202 https://bugzilla.suse.com/1210202
Bugzilla SUSE Bug 1210301 https://bugzilla.suse.com/1210301
Bugzilla SUSE Bug 1210329 https://bugzilla.suse.com/1210329
Bugzilla SUSE Bug 1210336 https://bugzilla.suse.com/1210336
Bugzilla SUSE Bug 1210337 https://bugzilla.suse.com/1210337
Bugzilla SUSE Bug 1210430 https://bugzilla.suse.com/1210430
Bugzilla SUSE Bug 1210460 https://bugzilla.suse.com/1210460
Bugzilla SUSE Bug 1210466 https://bugzilla.suse.com/1210466
Bugzilla SUSE Bug 1210469 https://bugzilla.suse.com/1210469
Bugzilla SUSE Bug 1210498 https://bugzilla.suse.com/1210498
Bugzilla SUSE Bug 1210506 https://bugzilla.suse.com/1210506
Bugzilla SUSE Bug 1210534 https://bugzilla.suse.com/1210534
Bugzilla SUSE Bug 1210647 https://bugzilla.suse.com/1210647
Bugzilla SUSE Bug 1210827 https://bugzilla.suse.com/1210827
CVE SUSE CVE CVE-2023-1670 page https://www.suse.com/security/cve/CVE-2023-1670/
CVE SUSE CVE CVE-2023-1855 page https://www.suse.com/security/cve/CVE-2023-1855/
CVE SUSE CVE CVE-2023-1989 page https://www.suse.com/security/cve/CVE-2023-1989/
CVE SUSE CVE CVE-2023-1990 page https://www.suse.com/security/cve/CVE-2023-1990/
CVE SUSE CVE CVE-2023-1998 page https://www.suse.com/security/cve/CVE-2023-1998/
CVE SUSE CVE CVE-2023-2124 page https://www.suse.com/security/cve/CVE-2023-2124/
CVE SUSE CVE CVE-2023-2162 page https://www.suse.com/security/cve/CVE-2023-2162/
CVE SUSE CVE CVE-2023-30772 page https://www.suse.com/security/cve/CVE-2023-30772/
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date