Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:0407-1 Final 1 1 2023-02-14T12:08:14Z current 2023-02-14T12:08:14Z 2023-02-14T12:08:14Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-47929: Fixed NULL pointer dereference bug in the traffic control subsystem (bnc#1207237). - CVE-2023-23454: Fixed denial or service in cbq_classify in net/sched/sch_cbq.c (bnc#1207036). - CVE-2022-4662: Fixed incorrect access control in the USB core subsystem that could lead a local user to crash the system (bnc#1206664). - CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bnc#1206073). The following non-security bugs were fixed: - Added support for enabling livepatching related packages on -RT (jsc#PED-1706). - Added suse-kernel-rpm-scriptlets to kmp buildreqs (boo#1205149). - Reverted 'constraints: increase disk space for all architectures' (bsc#1203693). - HID: betop: check shape of output reports (bsc#1207186). - HID: betop: fix slab-out-of-bounds Write in betop_probe (bsc#1207186). - HID: check empty report_list in hid_validate_values() (bsc#1206784). - net: sched: atm: dont intepret cls results when asked to drop (bsc#1207036). - net: sched: cbq: dont intepret cls results when asked to drop (bsc#1207036). - sctp: fail if no bound addresses can be used for a given scope (bsc#1206677). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-407,SUSE-OpenStack-Cloud-9-2023-407,SUSE-OpenStack-Cloud-Crowbar-9-2023-407,SUSE-SLE-HA-12-SP4-2023-407,SUSE-SLE-Live-Patching-12-SP4-2023-407,SUSE-SLE-SAP-12-SP4-2023-407,SUSE-SLE-SERVER-12-SP4-LTSS-2023-407 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20230407-1/ Link for SUSE-SU-2023:0407-1 https://lists.suse.com/pipermail/sle-security-updates/2023-February/013758.html E-Mail link for SUSE-SU-2023:0407-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1203693 SUSE Bug 1203693 https://bugzilla.suse.com/1205149 SUSE Bug 1205149 https://bugzilla.suse.com/1206073 SUSE Bug 1206073 https://bugzilla.suse.com/1206664 SUSE Bug 1206664 https://bugzilla.suse.com/1206677 SUSE Bug 1206677 https://bugzilla.suse.com/1206784 SUSE Bug 1206784 https://bugzilla.suse.com/1207036 SUSE Bug 1207036 https://bugzilla.suse.com/1207186 SUSE Bug 1207186 https://bugzilla.suse.com/1207237 SUSE Bug 1207237 https://www.suse.com/security/cve/CVE-2022-3564/ SUSE CVE CVE-2022-3564 page https://www.suse.com/security/cve/CVE-2022-4662/ SUSE CVE CVE-2022-4662 page https://www.suse.com/security/cve/CVE-2022-47929/ SUSE CVE CVE-2022-47929 page https://www.suse.com/security/cve/CVE-2023-23454/ SUSE CVE CVE-2023-23454 page SUSE Linux Enterprise High Availability Extension 12 SP4 SUSE Linux Enterprise Live Patching 12 SP4 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 cluster-md-kmp-default-4.12.14-95.117.1 dlm-kmp-default-4.12.14-95.117.1 gfs2-kmp-default-4.12.14-95.117.1 kernel-debug-4.12.14-95.117.1 kernel-debug-base-4.12.14-95.117.1 kernel-debug-devel-4.12.14-95.117.1 kernel-debug-kgraft-devel-4.12.14-95.117.1 kernel-default-4.12.14-95.117.1 kernel-default-base-4.12.14-95.117.1 kernel-default-devel-4.12.14-95.117.1 kernel-default-extra-4.12.14-95.117.1 kernel-default-kgraft-4.12.14-95.117.1 kernel-default-kgraft-devel-4.12.14-95.117.1 kernel-default-man-4.12.14-95.117.1 kernel-devel-4.12.14-95.117.1 kernel-docs-4.12.14-95.117.1 kernel-docs-html-4.12.14-95.117.1 kernel-kvmsmall-4.12.14-95.117.1 kernel-kvmsmall-base-4.12.14-95.117.1 kernel-kvmsmall-devel-4.12.14-95.117.1 kernel-kvmsmall-kgraft-devel-4.12.14-95.117.1 kernel-macros-4.12.14-95.117.1 kernel-obs-build-4.12.14-95.117.1 kernel-obs-qa-4.12.14-95.117.1 kernel-source-4.12.14-95.117.1 kernel-source-vanilla-4.12.14-95.117.1 kernel-syms-4.12.14-95.117.1 kernel-vanilla-4.12.14-95.117.1 kernel-vanilla-base-4.12.14-95.117.1 kernel-vanilla-devel-4.12.14-95.117.1 kernel-vanilla-kgraft-devel-4.12.14-95.117.1 kernel-zfcpdump-4.12.14-95.117.1 kernel-zfcpdump-man-4.12.14-95.117.1 kgraft-patch-4_12_14-95_117-default-1-6.3.1 kselftests-kmp-default-4.12.14-95.117.1 ocfs2-kmp-default-4.12.14-95.117.1 cluster-md-kmp-default-4.12.14-95.117.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 dlm-kmp-default-4.12.14-95.117.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 gfs2-kmp-default-4.12.14-95.117.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 ocfs2-kmp-default-4.12.14-95.117.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 kernel-default-kgraft-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kernel-default-kgraft-devel-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kgraft-patch-4_12_14-95_117-default-1-6.3.1 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kernel-default-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-base-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-devel-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-man-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-devel-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-macros-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-syms-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default-base-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default-devel-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-devel-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-macros-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-source-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-syms-4.12.14-95.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud 9 kernel-default-base-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud 9 kernel-default-devel-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud 9 kernel-devel-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud 9 kernel-macros-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud 9 kernel-source-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud 9 kernel-syms-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud 9 kernel-default-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-default-base-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-default-devel-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-devel-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-macros-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-source-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-syms-4.12.14-95.117.1 as a component of SUSE OpenStack Cloud Crowbar 9 A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087. CVE-2022-3564 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.117.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.117.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_117-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.117.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230407-1/ https://www.suse.com/security/cve/CVE-2022-3564.html CVE-2022-3564 https://bugzilla.suse.com/1206073 SUSE Bug 1206073 https://bugzilla.suse.com/1206314 SUSE Bug 1206314 https://bugzilla.suse.com/1208030 SUSE Bug 1208030 https://bugzilla.suse.com/1208044 SUSE Bug 1208044 https://bugzilla.suse.com/1208085 SUSE Bug 1208085 A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system. CVE-2022-4662 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.117.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.117.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_117-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.117.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230407-1/ https://www.suse.com/security/cve/CVE-2022-4662.html CVE-2022-4662 https://bugzilla.suse.com/1206664 SUSE Bug 1206664 In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdisc_graft in net/sched/sch_api.c. CVE-2022-47929 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.117.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.117.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_117-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.117.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230407-1/ https://www.suse.com/security/cve/CVE-2022-47929.html CVE-2022-47929 https://bugzilla.suse.com/1207237 SUSE Bug 1207237 cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results). CVE-2023-23454 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.117.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.117.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.117.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_117-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.117.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.117.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.117.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.117.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230407-1/ https://www.suse.com/security/cve/CVE-2023-23454.html CVE-2023-23454 https://bugzilla.suse.com/1207036 SUSE Bug 1207036 https://bugzilla.suse.com/1207188 SUSE Bug 1207188 https://bugzilla.suse.com/1208030 SUSE Bug 1208030 https://bugzilla.suse.com/1208044 SUSE Bug 1208044 https://bugzilla.suse.com/1208085 SUSE Bug 1208085 https://bugzilla.suse.com/1211833 SUSE Bug 1211833