Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) - CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051) - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518) - CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745). - CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046) - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861). - CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858). - CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467). The following non-security bugs were fixed: - KVM: x86: fix sending PV IPI (git-fixes, bsc#1210853, bsc#1216134). - bpf: propagate precision in ALU/ALU64 operations (git-fixes).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) - CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051) - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518) - CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745). - CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046) - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861). - CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858). - CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467). The following non-security bugs were fixed: - KVM: x86: fix sending PV IPI (git-fixes, bsc#1210853, bsc#1216134). - bpf: propagate precision in ALU/ALU64 operations (git-fixes).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1210778
- https://bugzilla.suse.com/1210853
- https://bugzilla.suse.com/1212051
- https://bugzilla.suse.com/1215467
- https://bugzilla.suse.com/1215518
- https://bugzilla.suse.com/1215745
- https://bugzilla.suse.com/1215858
- https://bugzilla.suse.com/1215860
- https://bugzilla.suse.com/1215861
- https://bugzilla.suse.com/1216046
- https://bugzilla.suse.com/1216051
- https://bugzilla.suse.com/1216134
- https://www.suse.com/security/cve/CVE-2023-2163
- https://www.suse.com/security/cve/CVE-2023-31085
- https://www.suse.com/security/cve/CVE-2023-3111
- https://www.suse.com/security/cve/CVE-2023-34324
- https://www.suse.com/security/cve/CVE-2023-39189
- https://www.suse.com/security/cve/CVE-2023-39192
- https://www.suse.com/security/cve/CVE-2023-39193
- https://www.suse.com/security/cve/CVE-2023-39194
- https://www.suse.com/security/cve/CVE-2023-42754
- https://www.suse.com/security/cve/CVE-2023-45862
- https://www.suse.com/support/update/announcement/2023/suse-su-20234377-1/