SUSE-SU-2024:0118-1

    Dashboard / Vulnerabilities / SUSE-SU-2024:0118-1

    SUSE-SU-2024:0118-1

    Published: 16 Jan 2024Last Modified: 4 Feb 2026

    Summary: Security update for the Linux Kernel

    Details: The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks (bsc#1179610 bsc#1215237). - CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bsc#1202095). - CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250). - CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947). - CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). - CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218258). - CVE-2023-6932: Fixed a use-after-free issue when receiving an IGMP query packet due to reference count mismanagement (bsc#1218253). - CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559). The following non-security bugs were fixed: - Enabled the LLC counters for “perf” (perf stat) on the Ice-Lake and Rocket-Lake CPUs (jsc#PED-5023 bsc#1211439). - Reviewed and added more information to README.SUSE (jsc#PED-5021). - Enabled multibuild for kernel packages (JSC-SLE#5501, boo#1211226, bsc#1218184). - Fix termination state for idr_for_each_entry_ul() (bsc#1109837). - KVM: s390/mm: Properly reset no-dat (bsc#1218057). - KVM: s390: vsie: fix wrong VIR 37 when MSO is used (bsc#1217936). - PCI: Disable ATS for specific Intel IPU E2000 devices (bsc#1218622). - Previous perf cve-4.12->SLE12-SP5 manual merge was incorrect. Fix. - gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479). - gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479). - gve: Changes to add new TX queues (bsc#1214479). - gve: Control path for DQO-QPL (bsc#1214479). - gve: Do not fully free QPL pages on prefill errors (bsc#1214479). - gve: Fix gve interrupt names (bsc#1214479). - gve: Fixes for napi_poll when budget is 0 (bsc#1214479). - gve: RX path for DQO-QPL (bsc#1214479). - gve: Set default duplex configuration to full (bsc#1214479). - gve: Tx path for DQO-QPL (bsc#1214479). - gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479). - gve: XDP support GQI-QPL: helper function changes (bsc#1214479). - gve: fix frag_list chaining (bsc#1214479). - gve: trivial spell fix Recive to Receive (bsc#1214479). - gve: unify driver name usage (bsc#1214479). - net/tg3: fix race condition in tg3_reset_task() (bsc#1217801). - net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1217801). - s390/vx: fix save/restore of fpu kernel context (bsc#1218362). - tracing: Fix a possible race when disabling buffered events (bsc#1217036). - tracing: Fix a warning when allocating buffered events fails (bsc#1217036). - tracing: Fix incomplete locking when disabling buffered events (bsc#1217036). - tracing: Fix warning in trace_buffered_event_disable() (bsc#1217036).

    References: https://www.suse.com/support/update/announcement/2024/suse-su-20240118-1/, https://bugzilla.suse.com/1109837, https://bugzilla.suse.com/1179610, https://bugzilla.suse.com/1202095, https://bugzilla.suse.com/1211226, https://bugzilla.suse.com/1211439, https://bugzilla.suse.com/1214479, https://bugzilla.suse.com/1215237, https://bugzilla.suse.com/1217036, https://bugzilla.suse.com/1217250, https://bugzilla.suse.com/1217801, https://bugzilla.suse.com/1217936, https://bugzilla.suse.com/1217946, https://bugzilla.suse.com/1217947, https://bugzilla.suse.com/1218057, https://bugzilla.suse.com/1218184, https://bugzilla.suse.com/1218253, https://bugzilla.suse.com/1218258, https://bugzilla.suse.com/1218362, https://bugzilla.suse.com/1218559, https://bugzilla.suse.com/1218622, https://www.suse.com/security/cve/CVE-2020-26555, https://www.suse.com/security/cve/CVE-2022-2586, https://www.suse.com/security/cve/CVE-2023-51779, https://www.suse.com/security/cve/CVE-2023-6121, https://www.suse.com/security/cve/CVE-2023-6606, https://www.suse.com/security/cve/CVE-2023-6610, https://www.suse.com/security/cve/CVE-2023-6931, https://www.suse.com/security/cve/CVE-2023-6932

    Affected packages

    Package

    Name: kernel-rt

    Purl: pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.12.14-10.157.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2024:0118-1 | CVE-DB