FlawAtlas
Search the atlas
SUSE-SU-2023:2830-1 Not scored

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). - CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128). - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-3268: Fixed an out of bounds flaw in relay_file_read_start_pos in kernel/relay.c that allowed a local attacker to crash the system or leak kernel internal information (bsc#1212502). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501). The following non-security bugs were fixed: - Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158). - Move setting %%build_html to config.sh - Move setting %%split_optional to config.sh - Move setting %%supported_modules_check to config.sh - rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm - rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)

Exploit probability Not scored
Published July 14, 2023
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-docs
SUSE:Linux Enterprise High Availability Extension 15 SP1 kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-syms
SUSE:Linux Enterprise Live Patching 15 SP1 kernel-default
SUSE:Linux Enterprise Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_42
SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-default
SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-obs-build
SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-source
SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-syms
SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 kernel-syms
openSUSE:Leap 15.4 kernel-debug
openSUSE:Leap 15.4 kernel-default
openSUSE:Leap 15.4 kernel-kvmsmall
openSUSE:Leap 15.4 kernel-vanilla
openSUSE:Leap 15.4 kernel-zfcpdump
openSUSE:Leap 15.5 kernel-vanilla

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2023:2830-1

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). - CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128). - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-3268: Fixed an out of bounds flaw in relay_file_read_start_pos in kernel/relay.c that allowed a local attacker to crash the system or leak kernel internal information (bsc#1212502). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501). The following non-security bugs were fixed: - Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158). - Move setting %%build_html to config.sh - Move setting %%split_optional to config.sh - Move setting %%supported_modules_check to config.sh - rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm - rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)

View original source

05 / REFERENCES

Further evidence