SUSE-SU-2023:2146-1

Dashboard / Vulnerabilities / SUSE-SU-2023:2146-1

SUSE-SU-2023:2146-1

Summary: Security update for the Linux Kernel

Details: The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1872:Fixed a use after free vulnerability in the io_uring subsystem, which could lead to local privilege escalation (bsc#1210414). - CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647). - CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege (bsc#1210629). - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506). - CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329). - CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453). - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202). - CVE-2020-36691: Fixed a denial of service (unbounded recursion) vulnerability via a nested Netlink policy with a back reference (bsc#1209613 bsc#1209777). - CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336). - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203). The following non-security bugs were fixed: - Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes). - Replace mkinitrd dependency with dracut (bsc#1202353). - cifs: fix negotiate context parsing (bsc#1210301).

References: https://www.suse.com/support/update/announcement/2023/suse-su-20232146-1/, https://bugzilla.suse.com/1202353, https://bugzilla.suse.com/1205128, https://bugzilla.suse.com/1206992, https://bugzilla.suse.com/1209613, https://bugzilla.suse.com/1209687, https://bugzilla.suse.com/1209777, https://bugzilla.suse.com/1209871, https://bugzilla.suse.com/1210202, https://bugzilla.suse.com/1210203, https://bugzilla.suse.com/1210301, https://bugzilla.suse.com/1210329, https://bugzilla.suse.com/1210336, https://bugzilla.suse.com/1210337, https://bugzilla.suse.com/1210414, https://bugzilla.suse.com/1210417, https://bugzilla.suse.com/1210453, https://bugzilla.suse.com/1210469, https://bugzilla.suse.com/1210506, https://bugzilla.suse.com/1210629, https://bugzilla.suse.com/1210647, https://www.suse.com/security/cve/CVE-2020-36691, https://www.suse.com/security/cve/CVE-2022-2196, https://www.suse.com/security/cve/CVE-2022-43945, https://www.suse.com/security/cve/CVE-2023-1611, https://www.suse.com/security/cve/CVE-2023-1670, https://www.suse.com/security/cve/CVE-2023-1838, https://www.suse.com/security/cve/CVE-2023-1855, https://www.suse.com/security/cve/CVE-2023-1872, https://www.suse.com/security/cve/CVE-2023-1989, https://www.suse.com/security/cve/CVE-2023-1990, https://www.suse.com/security/cve/CVE-2023-1998, https://www.suse.com/security/cve/CVE-2023-2008, https://www.suse.com/security/cve/CVE-2023-2162, https://www.suse.com/security/cve/CVE-2023-2176, https://www.suse.com/security/cve/CVE-2023-30772