Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:0134-1 Final 1 1 2023-01-25T10:16:28Z current 2023-01-25T10:16:28Z 2023-01-25T10:16:28Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3435: Fixed an out-of-bounds read in fib_nh_match() of the file net/ipv4/fib_semantics.c (bsc#1204171). - CVE-2022-4662: Fixed a recursive locking violation in usb-storage that can cause the kernel to deadlock. (bsc#1206664) - CVE-2022-3105: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc_array. (bsc#1206398) - CVE-2022-3108: Fixed a bug in kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c where a lack of check of the return value of kmemdup() could lead to a NULL pointer dereference. (bsc#1206389) - CVE-2022-3106: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc. (bsc#1206397) - CVE-2022-3107: Fixed a null pointer dereference caused by a missing check of the return value of kvmalloc_array. (bsc#1206395) - CVE-2022-3111: Fixed a missing release of resource after effective lifetime bug caused by a missing free of the WM8350_IRQ_CHG_FAST_RDY in wm8350_init_charger. (bsc#1206394) - CVE-2022-42328: Fixed a bug which could allow guests to trigger denial of service via the netback driver (bsc#1206114). - CVE-2022-42329: Fixed a bug which could allow guests to trigger denial of service via the netback driver (bsc#1206113). - CVE-2022-3643: Fixed a bug which could allow guests to trigger NIC interface reset/abort/crash via netback driver (bsc#1206113). - CVE-2019-19083: Fixed a memory leaks in clock_source_create that could allow attackers to cause a denial of service (bsc#1157049). The following non-security bugs were fixed: - afs: Fix some tracing details (git-fixes). - block: Do not reread partition table on exclusively open device (bsc#1190969). - cuse: prevent clone (bsc#1206177). - dt-bindings: clocks: imx8mp: Add ID for usb suspend clock (git-fixes). - efi: Add iMac Pro 2017 to uefi skip cert quirk (git-fixes). - fuse: do not check refcount after stealing page (bsc#1206174). - fuse: fix the ->direct_IO() treatment of iov_iter (bsc#1206176). - fuse: fix use after free in fuse_read_interrupt() (bsc#1206178). - fuse: lock inode unconditionally in fuse_fallocate() (bsc#1206179). - fuse: update attr_version counter on fuse_notify_inval_inode() (bsc#1206175). - ipv6: ping: fix wrong checksum for large frames (bsc#1203183). - kbuild: Unify options for BTF generation for vmlinux and modules (bsc#1204693). - mm, page_alloc: avoid expensive reclaim when compaction may not succeed (bsc#1204250). - net: mana: Fix race on per-CQ variable napi work_done (git-fixes). - net: usb: cdc_ncm: do not spew notifications (git-fixes). - net: usb: qmi_wwan: add u-blox 0x1342 composition (git-fixes). - rtc: pcf85063: Fix reading alarm (git-fixes). - s390/boot: add secure boot trailer (bsc#1205256 LTC#1205256). - tracing: Add tracing_reset_all_online_cpus_unlocked() function (git-fixes). - tracing: Delete all matched events (git-fixes). - tracing: Free buffers when a used dynamic event is removed (git-fixes). - usb: host: xhci-hub: fix extra endianness conversion (git-fixes). - usbnet: move new members to end (git-fixes). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-134,SUSE-SLE-Module-RT-15-SP3-2023-134,SUSE-SUSE-MicroOS-5.1-2023-134,SUSE-SUSE-MicroOS-5.2-2023-134,openSUSE-Leap-Micro-5.2-2023-134 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/ Link for SUSE-SU-2023:0134-1 https://lists.suse.com/pipermail/sle-security-updates/2023-January/013523.html E-Mail link for SUSE-SU-2023:0134-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1151927 SUSE Bug 1151927 https://bugzilla.suse.com/1157049 SUSE Bug 1157049 https://bugzilla.suse.com/1190969 SUSE Bug 1190969 https://bugzilla.suse.com/1203183 SUSE Bug 1203183 https://bugzilla.suse.com/1204171 SUSE Bug 1204171 https://bugzilla.suse.com/1204250 SUSE Bug 1204250 https://bugzilla.suse.com/1204693 SUSE Bug 1204693 https://bugzilla.suse.com/1205256 SUSE Bug 1205256 https://bugzilla.suse.com/1206113 SUSE Bug 1206113 https://bugzilla.suse.com/1206114 SUSE Bug 1206114 https://bugzilla.suse.com/1206174 SUSE Bug 1206174 https://bugzilla.suse.com/1206175 SUSE Bug 1206175 https://bugzilla.suse.com/1206176 SUSE Bug 1206176 https://bugzilla.suse.com/1206177 SUSE Bug 1206177 https://bugzilla.suse.com/1206178 SUSE Bug 1206178 https://bugzilla.suse.com/1206179 SUSE Bug 1206179 https://bugzilla.suse.com/1206389 SUSE Bug 1206389 https://bugzilla.suse.com/1206394 SUSE Bug 1206394 https://bugzilla.suse.com/1206395 SUSE Bug 1206395 https://bugzilla.suse.com/1206397 SUSE Bug 1206397 https://bugzilla.suse.com/1206398 SUSE Bug 1206398 https://bugzilla.suse.com/1206664 SUSE Bug 1206664 https://www.suse.com/security/cve/CVE-2019-19083/ SUSE CVE CVE-2019-19083 page https://www.suse.com/security/cve/CVE-2022-3105/ SUSE CVE CVE-2022-3105 page https://www.suse.com/security/cve/CVE-2022-3106/ SUSE CVE CVE-2022-3106 page https://www.suse.com/security/cve/CVE-2022-3107/ SUSE CVE CVE-2022-3107 page https://www.suse.com/security/cve/CVE-2022-3108/ SUSE CVE CVE-2022-3108 page https://www.suse.com/security/cve/CVE-2022-3111/ SUSE CVE CVE-2022-3111 page https://www.suse.com/security/cve/CVE-2022-3435/ SUSE CVE CVE-2022-3435 page https://www.suse.com/security/cve/CVE-2022-3643/ SUSE CVE CVE-2022-3643 page https://www.suse.com/security/cve/CVE-2022-42328/ SUSE CVE CVE-2022-42328 page https://www.suse.com/security/cve/CVE-2022-42329/ SUSE CVE CVE-2022-42329 page https://www.suse.com/security/cve/CVE-2022-4662/ SUSE CVE CVE-2022-4662 page SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Real Time Module 15 SP3 openSUSE Leap Micro 5.2 cluster-md-kmp-rt-5.3.18-150300.115.1 cluster-md-kmp-rt_debug-5.3.18-150300.115.1 dlm-kmp-rt-5.3.18-150300.115.1 dlm-kmp-rt_debug-5.3.18-150300.115.1 gfs2-kmp-rt-5.3.18-150300.115.1 gfs2-kmp-rt_debug-5.3.18-150300.115.1 kernel-devel-rt-5.3.18-150300.115.1 kernel-rt-5.3.18-150300.115.1 kernel-rt-devel-5.3.18-150300.115.1 kernel-rt-extra-5.3.18-150300.115.1 kernel-rt-livepatch-devel-5.3.18-150300.115.1 kernel-rt-optional-5.3.18-150300.115.1 kernel-rt_debug-5.3.18-150300.115.1 kernel-rt_debug-devel-5.3.18-150300.115.1 kernel-rt_debug-extra-5.3.18-150300.115.1 kernel-rt_debug-livepatch-devel-5.3.18-150300.115.1 kernel-rt_debug-optional-5.3.18-150300.115.1 kernel-source-rt-5.3.18-150300.115.1 kernel-syms-rt-5.3.18-150300.115.1 kselftests-kmp-rt-5.3.18-150300.115.1 kselftests-kmp-rt_debug-5.3.18-150300.115.1 ocfs2-kmp-rt-5.3.18-150300.115.1 ocfs2-kmp-rt_debug-5.3.18-150300.115.1 reiserfs-kmp-rt-5.3.18-150300.115.1 reiserfs-kmp-rt_debug-5.3.18-150300.115.1 kernel-rt-5.3.18-150300.115.1 as a component of SUSE Linux Enterprise Micro 5.1 kernel-rt-5.3.18-150300.115.1 as a component of SUSE Linux Enterprise Micro 5.2 cluster-md-kmp-rt-5.3.18-150300.115.1 as a component of SUSE Real Time Module 15 SP3 dlm-kmp-rt-5.3.18-150300.115.1 as a component of SUSE Real Time Module 15 SP3 gfs2-kmp-rt-5.3.18-150300.115.1 as a component of SUSE Real Time Module 15 SP3 kernel-devel-rt-5.3.18-150300.115.1 as a component of SUSE Real Time Module 15 SP3 kernel-rt-5.3.18-150300.115.1 as a component of SUSE Real Time Module 15 SP3 kernel-rt-devel-5.3.18-150300.115.1 as a component of SUSE Real Time Module 15 SP3 kernel-rt_debug-devel-5.3.18-150300.115.1 as a component of SUSE Real Time Module 15 SP3 kernel-source-rt-5.3.18-150300.115.1 as a component of SUSE Real Time Module 15 SP3 kernel-syms-rt-5.3.18-150300.115.1 as a component of SUSE Real Time Module 15 SP3 ocfs2-kmp-rt-5.3.18-150300.115.1 as a component of SUSE Real Time Module 15 SP3 kernel-rt-5.3.18-150300.115.1 as a component of openSUSE Leap Micro 5.2 Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption). This affects the dce112_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, the dce100_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, the dcn20_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c, the dce120_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, and the dce80_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce80/dce80_resource.c, aka CID-055e547478a1. CVE-2019-19083 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.115.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.115.1 openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.115.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/ https://www.suse.com/security/cve/CVE-2019-19083.html CVE-2019-19083 https://bugzilla.suse.com/1157049 SUSE Bug 1157049 An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array(). CVE-2022-3105 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.115.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.115.1 openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.115.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/ https://www.suse.com/security/cve/CVE-2022-3105.html CVE-2022-3105 https://bugzilla.suse.com/1206398 SUSE Bug 1206398 An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return value of kmalloc(). CVE-2022-3106 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.115.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.115.1 openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.115.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/ https://www.suse.com/security/cve/CVE-2022-3106.html CVE-2022-3106 https://bugzilla.suse.com/1206397 SUSE Bug 1206397 An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return value of kvmalloc_array() and will cause the null pointer dereference. CVE-2022-3107 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.115.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.115.1 openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.115.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/ https://www.suse.com/security/cve/CVE-2022-3107.html CVE-2022-3107 https://bugzilla.suse.com/1206395 SUSE Bug 1206395 An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup(). CVE-2022-3108 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.115.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.115.1 openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.115.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/ https://www.suse.com/security/cve/CVE-2022-3108.html CVE-2022-3108 https://bugzilla.suse.com/1206389 SUSE Bug 1206389 An issue was discovered in the Linux kernel through 5.16-rc6. free_charger_irq() in drivers/power/supply/wm8350_power.c lacks free of WM8350_IRQ_CHG_FAST_RDY, which is registered in wm8350_init_charger(). CVE-2022-3111 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.115.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.115.1 openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.115.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/ https://www.suse.com/security/cve/CVE-2022-3111.html CVE-2022-3111 https://bugzilla.suse.com/1206394 SUSE Bug 1206394 A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-210357 was assigned to this vulnerability. CVE-2022-3435 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.115.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.115.1 openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.115.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/ https://www.suse.com/security/cve/CVE-2022-3435.html CVE-2022-3435 https://bugzilla.suse.com/1204171 SUSE Bug 1204171 Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior. CVE-2022-3643 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.115.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.115.1 openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.115.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/ https://www.suse.com/security/cve/CVE-2022-3643.html CVE-2022-3643 https://bugzilla.suse.com/1206113 SUSE Bug 1206113 Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329). CVE-2022-42328 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.115.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.115.1 openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.115.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/ https://www.suse.com/security/cve/CVE-2022-42328.html CVE-2022-42328 https://bugzilla.suse.com/1206114 SUSE Bug 1206114 Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329). CVE-2022-42329 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.115.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.115.1 openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.115.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/ https://www.suse.com/security/cve/CVE-2022-42329.html CVE-2022-42329 https://bugzilla.suse.com/1206114 SUSE Bug 1206114 A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system. CVE-2022-4662 SUSE Linux Enterprise Micro 5.1:kernel-rt-5.3.18-150300.115.1 SUSE Linux Enterprise Micro 5.2:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:cluster-md-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:dlm-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:gfs2-kmp-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-devel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-rt_debug-devel-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-source-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:kernel-syms-rt-5.3.18-150300.115.1 SUSE Real Time Module 15 SP3:ocfs2-kmp-rt-5.3.18-150300.115.1 openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.115.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/ https://www.suse.com/security/cve/CVE-2022-4662.html CVE-2022-4662 https://bugzilla.suse.com/1206664 SUSE Bug 1206664