[SUSE-SU-2024:0977-1] Security update for the Linux Kernel
Severity
Important
Affected Packages
4
CVEs
49
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
- CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
- CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
- CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
- CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
- CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
- CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
- CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
- CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).
- CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
- CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
- CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
- CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
- CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
- CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
- CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253).
- CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
- CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
- CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
- CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
- CVE-2023-52457: Fixed skipped resource freeing if pm_runtime_resume_and_get() failed (bsc#1220350).
- CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
- CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
- CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433).
- CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
- CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
- CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
- CVE-2023-52484: Fixed a soft lockup triggered by arm_smmu_mm_invalidate_range (bsc#1220797).
- CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
- CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
- CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).
- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
- CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
- CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
- CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
- CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
- CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).
- CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).
- CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
- CVE-2024-26586: Fixed stack corruption (bsc#1220243).
- CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
- CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach (bsc#1220254).
- CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
- CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
- CVE-2024-26598: Fixed potential UAF in LPI translation cache (bsc#1220326).
- CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
- CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
- CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
- CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
The following non-security bugs were fixed:
- bpf: fix verification of indirect var-off stack access (git-fixes).
- bpf: guard stack limits against 32bit overflow (git-fixes).
- drop 2 git-fixes patches which are suspicious to introduce regression reported in bsc#1219073
- fix unresolved hunks in readme.branch
- kvm: vmx: move verw closer to vmentry for mds mitigation (git-fixes).
- kvm: vmx: use bt+jnc, i.e. eflags.cf to select vmresume vs. vmlaunch (git-fixes).
- nfs: avoid infinite loop in pnfs_update_layout (bsc#1219633).
- nvme: move nvme_stop_keep_alive() back to original position (bsc#1211515).
- nvme: remove nvme_alloc_request and nvme_alloc_request_qid (bsc#1214064).
- nvme: start keep-alive after admin queue setup (bsc#1211515).
- readme.branch: use correct mail for roy
- rpm/kernel-binary.spec.in: install scripts/gdb when enabled in config (bsc#1219653) they are put into -devel subpackage. and a proper link to /usr/share/gdb/auto-load/ is created.
- x86/asm: add _asm_rip() macro for x86-64 (%rip) suffix (git-fixes).
- x86/bugs: add asm helpers for executing verw (git-fixes).
- x86/bugs: use alternative() instead of mds_user_clear static key (git-fixes). also add the removed mds_user_clear symbol to kabi severities as it is exposed just for kvm module and is generally a core kernel component so removing it is low risk.
- x86/entry_32: add verw just before userspace transition (git-fixes).
- x86/entry_64: Add VERW just before userspace transition (git-fixes).
Package | Affected Version |
---|---|
![]() |
< 5.14.21-150400.15.71.1 |
![]() |
< 5.14.21-150400.15.71.1 |
![]() |
< 5.14.21-150400.15.71.1 |
![]() |
< 5.14.21-150400.15.71.1 |
- ID
- SUSE-SU-2024:0977-1
- Severity
- important
- URL
- https://www.suse.com/support/update/announcement/2024/suse-su-20240977-1/
- Published
-
2024-03-22T14:33:44
(5 months ago) - Modified
-
2024-03-22T14:33:44
(5 months ago) - Rights
- Copyright 2024 SUSE LLC. All rights reserved.
- Other Advisories
-
-
ALAS-2024-1899
-
ALAS-2024-1923
-
ALAS2-2022-1838
-
ALAS2-2023-2340
-
ALAS2-2024-2391
-
ALAS2-2024-2475
-
ALAS2-2024-2525
-
ALAS2-2024-2549
-
ALAS2-2024-2615
-
ALPINE:CVE-2023-28746
-
ALSA-2024:0897
-
ALSA-2024:3138
-
ALSA-2024:3618
-
ALSA-2024:4211
-
ALSA-2024:5101
-
DSA-5593-1
-
DSA-5594-1
-
DSA-5658-1
-
DSA-5681-1
-
ELSA-2023-13043
-
ELSA-2024-0897
-
ELSA-2024-12169
-
ELSA-2024-12271
-
ELSA-2024-12274
-
ELSA-2024-12275
-
ELSA-2024-1248
-
ELSA-2024-1249
-
ELSA-2024-12606
-
ELSA-2024-2394
-
ELSA-2024-3138
-
ELSA-2024-3618
-
ELSA-2024-4211
-
ELSA-2024-4583
-
ELSA-2024-5101
-
FEDORA-2024-2116a8468b
-
FEDORA-2024-29f57f1b4e
-
FEDORA-2024-3a36322c4b
-
FEDORA-2024-5db5954a5e
-
FEDORA-2024-71f0f16533
-
FEDORA-2024-88847bc77a
-
FEDORA-2024-96f3c3f3d3
-
FEDORA-2024-987089eca2
-
FEDORA-2024-9e9f53d01d
-
FEDORA-2024-cf47b35a6c
-
FEDORA-2024-d16d94b00d
-
FEDORA-2024-f3692f8528
-
FEDORA-2024-f797f1540e
-
FREEBSD:B6DD9D93-E09B-11EE-92FC-1C697A616631
-
MS:CVE-2023-28746
-
RHSA-2024:0881
-
RHSA-2024:0897
-
RHSA-2024:1249
-
RHSA-2024:1332
-
RHSA-2024:2950
-
RHSA-2024:3138
-
RHSA-2024:3618
-
RHSA-2024:3627
-
RHSA-2024:4211
-
RHSA-2024:4352
-
RHSA-2024:5101
-
RHSA-2024:5102
-
RLSA-2024:3138
-
RLSA-2024:3618
-
RLSA-2024:4211
-
RLSA-2024:4583
-
RLSA-2024:5101
-
SSA:2023-325-01
-
SSA:2024-157-01
-
SUSE-SU-2024:0855-1
-
SUSE-SU-2024:0856-1
-
SUSE-SU-2024:0857-1
-
SUSE-SU-2024:0858-1
-
SUSE-SU-2024:0900-1
-
SUSE-SU-2024:0900-2
-
SUSE-SU-2024:0910-1
-
SUSE-SU-2024:0917-1
-
SUSE-SU-2024:0925-1
-
SUSE-SU-2024:0926-1
-
SUSE-SU-2024:0975-1
-
SUSE-SU-2024:0976-1
-
SUSE-SU-2024:1101-1
-
SUSE-SU-2024:1102-1
-
SUSE-SU-2024:1105-1
-
SUSE-SU-2024:1139-1
-
SUSE-SU-2024:1152-1
-
SUSE-SU-2024:1181-1
-
SUSE-SU-2024:1183-1
-
SUSE-SU-2024:1184-1
-
SUSE-SU-2024:1207-1
-
SUSE-SU-2024:1229-1
-
SUSE-SU-2024:1236-1
-
SUSE-SU-2024:1239-1
-
SUSE-SU-2024:1246-1
-
SUSE-SU-2024:1248-1
-
SUSE-SU-2024:1249-1
-
SUSE-SU-2024:1251-1
-
SUSE-SU-2024:1252-1
-
SUSE-SU-2024:1257-1
-
SUSE-SU-2024:1273-1
-
SUSE-SU-2024:1274-1
-
SUSE-SU-2024:1278-1
-
SUSE-SU-2024:1280-1
-
SUSE-SU-2024:1288-1
-
SUSE-SU-2024:1292-1
-
SUSE-SU-2024:1298-1
-
SUSE-SU-2024:1299-1
-
SUSE-SU-2024:1312-1
-
SUSE-SU-2024:1318-1
-
SUSE-SU-2024:1321-1
-
SUSE-SU-2024:1322-1
-
SUSE-SU-2024:1358-1
-
SUSE-SU-2024:1359-1
-
SUSE-SU-2024:1362-1
-
SUSE-SU-2024:1364-1
-
SUSE-SU-2024:1380-1
-
SUSE-SU-2024:1386-1
-
SUSE-SU-2024:1388-1
-
SUSE-SU-2024:1390-1
-
SUSE-SU-2024:1391-1
-
SUSE-SU-2024:1405-1
-
SUSE-SU-2024:1406-1
-
SUSE-SU-2024:1409-1
-
SUSE-SU-2024:1410-1
-
SUSE-SU-2024:1411-1
-
SUSE-SU-2024:1418-1
-
SUSE-SU-2024:1454-1
-
SUSE-SU-2024:1465-1
-
SUSE-SU-2024:1466-1
-
SUSE-SU-2024:1480-1
-
SUSE-SU-2024:1489-1
-
SUSE-SU-2024:1490-1
-
SUSE-SU-2024:1558-1
-
SUSE-SU-2024:1562-1
-
SUSE-SU-2024:1580-1
-
SUSE-SU-2024:1582-1
-
SUSE-SU-2024:1596-1
-
SUSE-SU-2024:1641-1
-
SUSE-SU-2024:1642-1
-
SUSE-SU-2024:1643-1
-
SUSE-SU-2024:1644-1
-
SUSE-SU-2024:1646-1
-
SUSE-SU-2024:1647-1
-
SUSE-SU-2024:1648-1
-
SUSE-SU-2024:1650-1
-
SUSE-SU-2024:1659-1
-
SUSE-SU-2024:1663-1
-
SUSE-SU-2024:1669-1
-
SUSE-SU-2024:1677-1
-
SUSE-SU-2024:1679-1
-
SUSE-SU-2024:1680-1
-
SUSE-SU-2024:1682-1
-
SUSE-SU-2024:1685-1
-
SUSE-SU-2024:1686-1
-
SUSE-SU-2024:1692-1
-
SUSE-SU-2024:1695-1
-
SUSE-SU-2024:1696-1
-
SUSE-SU-2024:1705-1
-
SUSE-SU-2024:1706-1
-
SUSE-SU-2024:1707-1
-
SUSE-SU-2024:1709-1
-
SUSE-SU-2024:1711-1
-
SUSE-SU-2024:1712-1
-
SUSE-SU-2024:1713-1
-
SUSE-SU-2024:1720-1
-
SUSE-SU-2024:1726-1
-
SUSE-SU-2024:1729-1
-
SUSE-SU-2024:1732-1
-
SUSE-SU-2024:1735-1
-
SUSE-SU-2024:1736-1
-
SUSE-SU-2024:1739-1
-
SUSE-SU-2024:1740-1
-
SUSE-SU-2024:1742-1
-
SUSE-SU-2024:1746-1
-
SUSE-SU-2024:1748-1
-
SUSE-SU-2024:1749-1
-
SUSE-SU-2024:1751-1
-
SUSE-SU-2024:1757-1
-
SUSE-SU-2024:1759-1
-
SUSE-SU-2024:1870-1
-
SUSE-SU-2024:2092-1
-
SUSE-SU-2024:2135-1
-
SUSE-SU-2024:2162-1
-
SUSE-SU-2024:2207-1
-
SUSE-SU-2024:2337-1
-
SUSE-SU-2024:2446-1
-
SUSE-SU-2024:2535-1
-
SUSE-SU-2024:2722-1
-
SUSE-SU-2024:2824-1
-
SUSE-SU-2024:2850-1
-
SUSE-SU-2024:2894-1
-
SUSE-SU-2024:2923-1
-
SUSE-SU-2024:2929-1
-
SUSE-SU-2024:2947-1
-
SUSE-SU-2024:2948-1
-
USN-6443-1
-
USN-6444-1
-
USN-6444-2
-
USN-6445-1
-
USN-6445-2
-
USN-6446-1
-
USN-6446-2
-
USN-6446-3
-
USN-6454-1
-
USN-6454-2
-
USN-6454-3
-
USN-6454-4
-
USN-6466-1
-
USN-6479-1
-
USN-6606-1
-
USN-6607-1
-
USN-6608-1
-
USN-6608-2
-
USN-6609-1
-
USN-6609-2
-
USN-6609-3
-
USN-6628-1
-
USN-6628-2
-
USN-6635-1
-
USN-6639-1
-
USN-6680-1
-
USN-6680-2
-
USN-6680-3
-
USN-6686-1
-
USN-6686-2
-
USN-6686-3
-
USN-6686-4
-
USN-6686-5
-
USN-6688-1
-
USN-6705-1
-
USN-6724-1
-
USN-6724-2
-
USN-6725-1
-
USN-6725-2
-
USN-6726-1
-
USN-6726-2
-
USN-6726-3
-
USN-6739-1
-
USN-6740-1
-
USN-6741-1
-
USN-6743-1
-
USN-6743-2
-
USN-6743-3
-
USN-6765-1
-
USN-6766-1
-
USN-6766-2
-
USN-6766-3
-
USN-6767-1
-
USN-6767-2
-
USN-6774-1
-
USN-6775-1
-
USN-6775-2
-
USN-6776-1
-
USN-6777-1
-
USN-6777-2
-
USN-6777-3
-
USN-6777-4
-
USN-6778-1
-
USN-6795-1
-
USN-6797-1
-
USN-6816-1
-
USN-6817-1
-
USN-6817-2
-
USN-6817-3
-
USN-6818-1
-
USN-6818-2
-
USN-6818-3
-
USN-6818-4
-
USN-6819-1
-
USN-6819-2
-
USN-6819-3
-
USN-6819-4
-
USN-6820-1
-
USN-6820-2
-
USN-6821-1
-
USN-6821-2
-
USN-6821-3
-
USN-6821-4
-
USN-6828-1
-
USN-6865-1
-
USN-6866-1
-
USN-6866-2
-
USN-6866-3
-
USN-6871-1
-
USN-6878-1
-
USN-6892-1
-
USN-6895-1
-
USN-6895-2
-
USN-6895-3
-
USN-6895-4
-
USN-6896-1
-
USN-6896-2
-
USN-6896-3
-
USN-6896-4
-
USN-6896-5
-
USN-6900-1
-
USN-6919-1
-
USN-6924-1
-
USN-6924-2
-
USN-6926-1
-
USN-6926-2
-
USN-6926-3
-
USN-6938-1
-
USN-6953-1
-
USN-6976-1
-
USN-6979-1
-
XSA-452
-
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:rpm/suse/kernel-source-rt?arch=noarch&distro=slem-5 | suse |
![]() |
< 5.14.21-150400.15.71.1 | slem-5 | noarch | |
Affected | pkg:rpm/suse/kernel-rt?arch=x86_64&distro=slem-5 | suse |
![]() |
< 5.14.21-150400.15.71.1 | slem-5 | x86_64 | |
Affected | pkg:rpm/suse/kernel-rt?arch=x86_64&distro=opensuse-leap-micro-5.4 | suse |
![]() |
< 5.14.21-150400.15.71.1 | opensuse-leap-micro-5.4 | x86_64 | |
Affected | pkg:rpm/suse/kernel-rt?arch=x86_64&distro=opensuse-leap-micro-5.3 | suse |
![]() |
< 5.14.21-150400.15.71.1 | opensuse-leap-micro-5.3 | x86_64 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |