FlawAtlas
Search the atlas
SUSE-SU-2023:4377-1 Not scored

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) - CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051) - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518) - CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745). - CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046) - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861). - CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858). - CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467). The following non-security bugs were fixed: - KVM: x86: fix sending PV IPI (git-fixes, bsc#1210853, bsc#1216134). - bpf: propagate precision in ALU/ALU64 operations (git-fixes).

Exploit probability Not scored
Published November 6, 2023
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise High Availability Extension 15 SP2 kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-syms
SUSE:Linux Enterprise Live Patching 15 SP2 kernel-default
SUSE:Linux Enterprise Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_42
SUSE:Linux Enterprise Server 15 SP2-LTSS kernel-default
SUSE:Linux Enterprise Server 15 SP2-LTSS kernel-default-base
SUSE:Linux Enterprise Server 15 SP2-LTSS kernel-docs
SUSE:Linux Enterprise Server 15 SP2-LTSS kernel-obs-build
SUSE:Linux Enterprise Server 15 SP2-LTSS kernel-preempt
SUSE:Linux Enterprise Server 15 SP2-LTSS kernel-source
SUSE:Linux Enterprise Server 15 SP2-LTSS kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 kernel-preempt
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 kernel-syms

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2023:4377-1

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) - CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend beyond the end of an allocation causing. (bsc#1216051) - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518) - CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745). - CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046) - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861). - CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858). - CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467). The following non-security bugs were fixed: - KVM: x86: fix sending PV IPI (git-fixes, bsc#1210853, bsc#1216134). - bpf: propagate precision in ALU/ALU64 operations (git-fixes).

View original source

05 / REFERENCES

Further evidence