FlawAtlas
Search the atlas
SUSE-SU-2023:0768-1 Not scored

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535). - CVE-2022-2991: Fixed an heap-based overflow in the lightnvm implemenation (bsc#1201420). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. (bsc#1205711) - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-0597: Fixed a lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837). - CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). The following non-security bugs were fixed: - kabi/severities: add l2tp local symbols - module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662). - net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875).

Exploit probability Not scored
Published March 16, 2023
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise High Availability Extension 15 SP1 kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-syms
SUSE:Linux Enterprise Live Patching 15 SP1 kernel-default
SUSE:Linux Enterprise Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_38
SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-default
SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-docs
SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-obs-build
SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-source
SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-syms
SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 kernel-syms
openSUSE:Leap 15.4 kernel-debug
openSUSE:Leap 15.4 kernel-default
openSUSE:Leap 15.4 kernel-kvmsmall
openSUSE:Leap 15.4 kernel-vanilla
openSUSE:Leap 15.4 kernel-zfcpdump

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2023:0768-1

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535). - CVE-2022-2991: Fixed an heap-based overflow in the lightnvm implemenation (bsc#1201420). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. (bsc#1205711) - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-0597: Fixed a lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837). - CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). The following non-security bugs were fixed: - kabi/severities: add l2tp local symbols - module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662). - net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875).

View original source

05 / REFERENCES

Further evidence