SUSE-SU-2023:2151-1

    Dashboard / Vulnerabilities / SUSE-SU-2023:2151-1

    SUSE-SU-2023:2151-1

    Published: 9 May 2023Last Modified: 4 Feb 2026

    Summary: Security update for the Linux Kernel

    Details: The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647). - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506). - CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329). - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336). - CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337). - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2020-36691: Fixed a denial of service vulnerability via a nested Netlink policy with a back reference (bsc#1209777). The following non-security bugs were fixed: - cifs: fix negotiate context parsing (bsc#1210301). - cred: allow get_cred() and put_cred() to be given NULL (bsc#1209887).

    References: https://www.suse.com/support/update/announcement/2023/suse-su-20232151-1/, https://bugzilla.suse.com/1202353, https://bugzilla.suse.com/1205128, https://bugzilla.suse.com/1209613, https://bugzilla.suse.com/1209687, https://bugzilla.suse.com/1209777, https://bugzilla.suse.com/1209871, https://bugzilla.suse.com/1209887, https://bugzilla.suse.com/1210202, https://bugzilla.suse.com/1210301, https://bugzilla.suse.com/1210329, https://bugzilla.suse.com/1210336, https://bugzilla.suse.com/1210337, https://bugzilla.suse.com/1210469, https://bugzilla.suse.com/1210498, https://bugzilla.suse.com/1210506, https://bugzilla.suse.com/1210647, https://www.suse.com/security/cve/CVE-2020-36691, https://www.suse.com/security/cve/CVE-2022-43945, https://www.suse.com/security/cve/CVE-2023-1611, https://www.suse.com/security/cve/CVE-2023-1670, https://www.suse.com/security/cve/CVE-2023-1855, https://www.suse.com/security/cve/CVE-2023-1989, https://www.suse.com/security/cve/CVE-2023-1990, https://www.suse.com/security/cve/CVE-2023-1998, https://www.suse.com/security/cve/CVE-2023-2124, https://www.suse.com/security/cve/CVE-2023-2162, https://www.suse.com/security/cve/CVE-2023-30772

    Affected packages

    Package

    Name: kernel-default

    Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP1

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.12.14-150100.197.145.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2023:2151-1 | CVE-DB