SUSE-SU-2023:4030-1

Dashboard / Vulnerabilities / SUSE-SU-2023:4030-1

SUSE-SU-2023:4030-1

Summary: Security update for the Linux Kernel

Details: The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150). - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table which could be exploited by network adjacent attackers, increasing CPU usage by 95% (bsc#1212703). - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275). - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036). - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115). - CVE-2020-36766: Fixed a potential information leak in in the CEC driver (bsc#1215299). - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169). - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643). - CVE-2023-4881: Fixed an out-of-bounds write flaw in the netfilter subsystem that could lead to information disclosure or denial of service (bsc#1215221). - CVE-2023-40283: Fixed a use-after-free issue in the Bluetooth subsystem (bsc#1214233). - CVE-2023-1192: Fixed a use-after-free in the CIFS subsystem (bsc#1208995). The following non-security bugs were fixed: - check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). - mkspec: Allow unsupported KMPs (bsc#1214386) - rpm/mkspec-dtb: support for nested subdirs. - x86/srso: Do not probe microcode in a guest (git-fixes). - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes). - x86/srso: Fix srso_show_state() side effect (git-fixes). - x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes).

References: https://www.suse.com/support/update/announcement/2023/suse-su-20234030-1/, https://bugzilla.suse.com/1207036, https://bugzilla.suse.com/1208995, https://bugzilla.suse.com/1210169, https://bugzilla.suse.com/1210643, https://bugzilla.suse.com/1212703, https://bugzilla.suse.com/1214233, https://bugzilla.suse.com/1214351, https://bugzilla.suse.com/1214380, https://bugzilla.suse.com/1214386, https://bugzilla.suse.com/1215115, https://bugzilla.suse.com/1215117, https://bugzilla.suse.com/1215150, https://bugzilla.suse.com/1215221, https://bugzilla.suse.com/1215275, https://bugzilla.suse.com/1215299, https://www.suse.com/security/cve/CVE-2020-36766, https://www.suse.com/security/cve/CVE-2023-1192, https://www.suse.com/security/cve/CVE-2023-1206, https://www.suse.com/security/cve/CVE-2023-1859, https://www.suse.com/security/cve/CVE-2023-2177, https://www.suse.com/security/cve/CVE-2023-23454, https://www.suse.com/security/cve/CVE-2023-40283, https://www.suse.com/security/cve/CVE-2023-42753, https://www.suse.com/security/cve/CVE-2023-4389, https://www.suse.com/security/cve/CVE-2023-4622, https://www.suse.com/security/cve/CVE-2023-4623, https://www.suse.com/security/cve/CVE-2023-4881, https://www.suse.com/security/cve/CVE-2023-4921