Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:1803-1 Final 1 1 2023-04-10T09:07:18Z current 2023-04-10T09:07:18Z 2023-04-10T09:07:18Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547). - CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256). - CVE-2021-3923: Fixed stack information leak vulnerability that could lead to kernel protection bypass in infiniband RDMA (bsc#1209778). - CVE-2022-20567: Fixed use after free that could lead to a local privilege escalation in pppol2tp_create of l2tp_ppp.c (bsc#1208850). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634). - CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1209289). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036). - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207125). - CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291). - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052). - CVE-2023-28772: Fixed buffer overflow in seq_buf_putmem_hex in lib/seq_buf.c (bsc#1209549). The following non-security bugs were fixed: - Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes). - Bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - Do not sign the vanilla kernel (bsc#1209008). - Input: atmel_mxt_ts - fix double free in mxt_read_info_block (git-fixes). - KVM: arm64: Hide system instruction access to Trace registers (git-fixes) - NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes). [iivanov] Fix Patch-mainline to v6.3-rc5 - PCI/MSI: Enforce MSI entry updates to be visible (git-fixes). - PCI/MSI: Enforce that MSI-X table entry is masked for update (git-fixes). - PCI/MSI: Mask all unused MSI-X entries (git-fixes). - PCI/MSI: Skip masking MSI-X on Xen PV (git-fixes). - PCI/PM: Always return devices to D0 when thawing (git-fixes). - PCI/PM: Avoid using device_may_wakeup() for runtime PM (git-fixes). - PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints (git-fixes). - PCI: Add ACS quirk for iProc PAXB (git-fixes). - PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0 (git-fixes). - PCI: Avoid FLR for AMD Starship USB 3.0 (git-fixes). - PCI: Make ACS quirk implementations more uniform (git-fixes). - PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently (git-fixes). - PCI: PM: Avoid skipping bus-level PM on platforms without ACPI (git-fixes). - PCI: Unify ACS quirk desired vs provided checking (git-fixes). - PCI: Use pci_update_current_state() in pci_enable_device_flags() (git-fixes). - PCI: aardvark: Do not blindly enable ASPM L0s and do not write to read-only register (git-fixes). - PCI: aardvark: Do not rely on jiffies while holding spinlock (git-fixes). - PCI: aardvark: Do not touch PCIe registers if no card connected (git-fixes). - PCI: aardvark: Fix a leaked reference by adding missing of_node_put() (git-fixes). - PCI: aardvark: Fix checking for PIO Non-posted Request (git-fixes). - PCI: aardvark: Fix kernel panic during PIO transfer (git-fixes). - PCI: aardvark: Improve link training (git-fixes). - PCI: aardvark: Indicate error in 'val' when config read fails (git-fixes). - PCI: aardvark: Introduce an advk_pcie_valid_device() helper (git-fixes). - PCI: aardvark: Remove PCIe outbound window configuration (git-fixes). - PCI: aardvark: Train link immediately after enabling training (git-fixes). - PCI: aardvark: Wait for endpoint to be ready before training link (git-fixes). - PCI: endpoint: Cast the page number to phys_addr_t (git-fixes). - PCI: endpoint: Fix for concurrent memory allocation in OB address region (git-fixes). - PCI: hv: Add a per-bus mutex state_lock (bsc#1207001). - PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207001). - PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207001). - PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207001). - PCI: qcom: Use PHY_REFCLK_USE_PAD only for ipq8064 (git-fixes). - PCI: tegra: Fix OF node reference leak (git-fixes). - PCI: xgene-msi: Fix race in installing chained irq handler (git-fixes). - PM: hibernate: flush swap writer after marking (git-fixes). - README.BRANCH: Adding myself to the maintainer list - README: remove copy of config and update the text (bsc#1191924) - Revert 'PCI: hv: Fix a timing issue which causes kdump to fail occasionally' (bsc#1207001). - Revert 'arm64: dts: juno: add dma-ranges property' (git-fixes) - Revert 'mei: me: enable asynchronous probing' (bsc#1208048, bsc#1209126). - SUNRPC: Fix a server shutdown leak (git-fixes). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arm64/alternatives: do not patch up internal branches (git-fixes) - arm64/alternatives: move length validation inside the subsection (git-fixes) - arm64/alternatives: use subsections for replacement sequences (git-fixes) - arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes) - arm64/mm: fix variable 'pud' set but not used (git-fixes) - arm64/mm: return cpu_all_mask when node is NUMA_NO_NODE (git-fixes) - arm64/vdso: Discard .note.gnu.property sections in vDSO (git-fixes) - arm64: Discard .note.GNU-stack section (bsc#1203693 bsc#1209798). - arm64: Do not forget syscall when starting a new thread. (git-fixes) - arm64: Fix compiler warning from pte_unmap() with (git-fixes) - arm64: Mark __stack_chk_guard as __ro_after_init (git-fixes) - arm64: Use test_tsk_thread_flag() for checking TIF_SINGLESTEP (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: cpu_ops: fix a leaked reference by adding missing of_node_put (git-fixes) - arm64: fix oops in concurrently setting insn_emulation sysctls (git-fixes) - arm64: kprobe: make page to RO mode when allocate it (git-fixes) - arm64: kpti: ensure patched kernel text is fetched from PoU (git-fixes) - arm64: psci: Avoid printing in cpu_psci_cpu_die() (git-fixes) - arm64: psci: Reduce the waiting time for cpu_psci_cpu_kill() (git-fixes) - arm64: unwind: Prohibit probing on return_address() (git-fixes) - crypto: arm64 - Fix unused variable compilation warnings of (git-fixes) - dt-bindings: reset: meson8b: fix duplicate reset IDs (git-fixes). - ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes). - git_sort: tests: Adjust to new net repository location - git_sort: tests: Fix tests failing on SLE15 Use the correct base image, pygit2 is not found by pythong otherwise. - git_sort: tests: Kernel:tools does not have Leap repos, use SLE - git_sort: tests: Use 15.4, 15.3 is EOL - git_sort: tests: do not disable package repository GPG check This adds the Kernel repository key and enables GPG check for package installation inside containers. - git_sort: tests: exit on error - ima: Fix function name error in comment (git-fixes). - ipv4: route: fix inet_rtm_getroute induced crash (git-fixes). - kabi: PCI: endpoint: Fix for concurrent memory allocation in OB address region (git-fixes). - kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179). - kfifo: fix ternary sign extension bugs (git-fixes). - kgdb: Drop malformed kernel doc comment (git-fixes). - media: coda: Add check for dcoda_iram_alloc (git-fixes). - media: coda: Add check for kmalloc (git-fixes). - media: platform: ti: Add missing check for devm_regulator_get (git-fixes). - net: usb: lan78xx: Limit packet length to skb->len (git-fixes). - net: usb: qmi_wwan: Adding support for Cinterion MV31 (git-fixes). - net: usb: smsc75xx: Limit packet length to skb->len (git-fixes). - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes). - net: usb: smsc95xx: Limit packet length to skb->len (git-fixes). - powerpc/btext: add missing of_node_put (bsc#1065729). - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729). - powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes). - powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729). - powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729). - powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1065729). - ppc64le: HWPOISON_INJECT=m (bsc#1209572). - ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes). - s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes). - sbitmap: Avoid lockups when waker gets preempted (bsc#1209118). - scripts/osc_wrapper: Assign spec with *.spec file when building. - scripts/sequence-patch.sh: remove obsolete egrep Avoids a warning and prepares for ultimate removal - boo#1203092 - scsi: lpfc: Return DID_TRANSPORT_DISRUPTED instead of DID_REQUEUE (bsc#1199837). - scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556). - timers/sched_clock: Prevent generic sched_clock wrap caused by tick_freeze() (git-fixes). - timers: Clear timer_base::must_forward_clk with (bsc#1207890) - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes). - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes). - usb: chipidea: fix deadlock in ci_otg_del_timer (git-fixes). - usb: dwc3: exynos: Fix remove() function (git-fixes). - usb: dwc3: gadget: Stop processing more requests on IMI (git-fixes). - usb: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (git-fixes). - usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes). - x86/PCI: Fix PCI IRQ routing table memory leak (git-fixes). - x86/apic: Add name to irq chip (bsc#1206010). - x86/apic: Deinline x2apic functions (bsc#1181001 jsc#ECO-3191). - x86/atomic: Fix smp_mb__{before,after}_atomic() (git-fixes). - x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c (git-fixes). - x86/ia32: Fix ia32_restore_sigcontext() AC leak (git-fixes). - x86/ioapic: Force affinity setup before startup (bsc#1193231). - x86/irq/64: Limit IST stack overflow check to #DB stack (git-fixes). - x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() (git-fixes). - x86/paravirt: Fix callee-saved function ELF sizes (git-fixes). - x86/power: Fix 'nosmt' vs hibernation triple fault during resume (git-fixes). - x86/stacktrace: Prevent infinite loop in arch_stack_walk_user() (git-fixes). - x86/uaccess, signal: Fix AC=1 bloat (git-fixes). - x86/x2apic: Mark set_x2apic_phys_mode() as __init (bsc#1181001 jsc#ECO-3191). - x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes). - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes). - xen-netfront: Fix NULL sring after live migration (git-fixes). - xen-netfront: Fix mismatched rtnl_unlock (git-fixes). - xen-netfront: Fix race between device setup and open (git-fixes). - xen-netfront: Update features after registering netdev (git-fixes). - xen-netfront: enable device after manual module load (git-fixes). - xen-netfront: fix potential deadlock in xennet_remove() (git-fixes). - xen-netfront: wait xenbus state change when load module manually (git-fixes). - xen/netfront: fix waiting for xenbus state change (git-fixes). - xen/netfront: stop tx queues during live migration (git-fixes). - xen/platform-pci: add missing free_irq() in error path (git-fixes). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-Azure-BYOS-2023-1803,Image SLES12-SP5-Azure-HPC-BYOS-2023-1803,Image SLES12-SP5-Azure-SAP-BYOS-2023-1803,Image SLES12-SP5-Azure-SAP-On-Demand-2023-1803,Image SLES12-SP5-EC2-BYOS-2023-1803,Image SLES12-SP5-EC2-ECS-On-Demand-2023-1803,Image SLES12-SP5-EC2-On-Demand-2023-1803,Image SLES12-SP5-EC2-SAP-BYOS-2023-1803,Image SLES12-SP5-EC2-SAP-On-Demand-2023-1803,Image SLES12-SP5-GCE-BYOS-2023-1803,Image SLES12-SP5-GCE-On-Demand-2023-1803,Image SLES12-SP5-GCE-SAP-BYOS-2023-1803,Image SLES12-SP5-GCE-SAP-On-Demand-2023-1803,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2023-1803,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2023-1803,SUSE-2023-1803,SUSE-SLE-HA-12-SP5-2023-1803,SUSE-SLE-Live-Patching-12-SP5-2023-1803,SUSE-SLE-SDK-12-SP5-2023-1803,SUSE-SLE-SERVER-12-SP5-2023-1803,SUSE-SLE-WE-12-SP5-2023-1803 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ Link for SUSE-SU-2023:1803-1 https://lists.suse.com/pipermail/sle-updates/2023-April/028738.html E-Mail link for SUSE-SU-2023:1803-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1065729 SUSE Bug 1065729 https://bugzilla.suse.com/1076830 SUSE Bug 1076830 https://bugzilla.suse.com/1109158 SUSE Bug 1109158 https://bugzilla.suse.com/1181001 SUSE Bug 1181001 https://bugzilla.suse.com/1191924 SUSE Bug 1191924 https://bugzilla.suse.com/1193231 SUSE Bug 1193231 https://bugzilla.suse.com/1199837 SUSE Bug 1199837 https://bugzilla.suse.com/1203092 SUSE Bug 1203092 https://bugzilla.suse.com/1203693 SUSE Bug 1203693 https://bugzilla.suse.com/1206010 SUSE Bug 1206010 https://bugzilla.suse.com/1207001 SUSE Bug 1207001 https://bugzilla.suse.com/1207036 SUSE Bug 1207036 https://bugzilla.suse.com/1207125 SUSE Bug 1207125 https://bugzilla.suse.com/1207795 SUSE Bug 1207795 https://bugzilla.suse.com/1207890 SUSE Bug 1207890 https://bugzilla.suse.com/1208048 SUSE Bug 1208048 https://bugzilla.suse.com/1208179 SUSE Bug 1208179 https://bugzilla.suse.com/1208599 SUSE Bug 1208599 https://bugzilla.suse.com/1208777 SUSE Bug 1208777 https://bugzilla.suse.com/1208850 SUSE Bug 1208850 https://bugzilla.suse.com/1209008 SUSE Bug 1209008 https://bugzilla.suse.com/1209052 SUSE Bug 1209052 https://bugzilla.suse.com/1209118 SUSE Bug 1209118 https://bugzilla.suse.com/1209126 SUSE Bug 1209126 https://bugzilla.suse.com/1209256 SUSE Bug 1209256 https://bugzilla.suse.com/1209289 SUSE Bug 1209289 https://bugzilla.suse.com/1209291 SUSE Bug 1209291 https://bugzilla.suse.com/1209292 SUSE Bug 1209292 https://bugzilla.suse.com/1209532 SUSE Bug 1209532 https://bugzilla.suse.com/1209547 SUSE Bug 1209547 https://bugzilla.suse.com/1209549 SUSE Bug 1209549 https://bugzilla.suse.com/1209556 SUSE Bug 1209556 https://bugzilla.suse.com/1209572 SUSE Bug 1209572 https://bugzilla.suse.com/1209634 SUSE Bug 1209634 https://bugzilla.suse.com/1209684 SUSE Bug 1209684 https://bugzilla.suse.com/1209778 SUSE Bug 1209778 https://bugzilla.suse.com/1209798 SUSE Bug 1209798 https://www.suse.com/security/cve/CVE-2017-5753/ SUSE CVE CVE-2017-5753 page https://www.suse.com/security/cve/CVE-2021-3923/ SUSE CVE CVE-2021-3923 page https://www.suse.com/security/cve/CVE-2022-20567/ SUSE CVE CVE-2022-20567 page https://www.suse.com/security/cve/CVE-2023-0590/ SUSE CVE CVE-2023-0590 page https://www.suse.com/security/cve/CVE-2023-1076/ SUSE CVE CVE-2023-1076 page https://www.suse.com/security/cve/CVE-2023-1095/ SUSE CVE CVE-2023-1095 page https://www.suse.com/security/cve/CVE-2023-1281/ SUSE CVE CVE-2023-1281 page https://www.suse.com/security/cve/CVE-2023-1390/ SUSE CVE CVE-2023-1390 page https://www.suse.com/security/cve/CVE-2023-1513/ SUSE CVE CVE-2023-1513 page https://www.suse.com/security/cve/CVE-2023-23454/ SUSE CVE CVE-2023-23454 page https://www.suse.com/security/cve/CVE-2023-23455/ SUSE CVE CVE-2023-23455 page https://www.suse.com/security/cve/CVE-2023-28328/ SUSE CVE CVE-2023-28328 page https://www.suse.com/security/cve/CVE-2023-28464/ SUSE CVE CVE-2023-28464 page https://www.suse.com/security/cve/CVE-2023-28772/ SUSE CVE CVE-2023-28772 page Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 kernel-default-4.12.14-122.156.1 cluster-md-kmp-default-4.12.14-122.156.1 dlm-kmp-default-4.12.14-122.156.1 gfs2-kmp-default-4.12.14-122.156.1 ocfs2-kmp-default-4.12.14-122.156.1 kernel-debug-4.12.14-122.156.1 kernel-debug-base-4.12.14-122.156.1 kernel-debug-devel-4.12.14-122.156.1 kernel-debug-kgraft-devel-4.12.14-122.156.1 kernel-default-base-4.12.14-122.156.1 kernel-default-devel-4.12.14-122.156.1 kernel-default-extra-4.12.14-122.156.1 kernel-default-kgraft-4.12.14-122.156.1 kernel-default-kgraft-devel-4.12.14-122.156.1 kernel-default-man-4.12.14-122.156.1 kernel-devel-4.12.14-122.156.1 kernel-docs-4.12.14-122.156.1 kernel-docs-html-4.12.14-122.156.1 kernel-kvmsmall-4.12.14-122.156.1 kernel-kvmsmall-base-4.12.14-122.156.1 kernel-kvmsmall-devel-4.12.14-122.156.1 kernel-kvmsmall-kgraft-devel-4.12.14-122.156.1 kernel-macros-4.12.14-122.156.1 kernel-obs-build-4.12.14-122.156.1 kernel-obs-qa-4.12.14-122.156.1 kernel-source-4.12.14-122.156.1 kernel-source-vanilla-4.12.14-122.156.1 kernel-syms-4.12.14-122.156.1 kernel-vanilla-4.12.14-122.156.1 kernel-vanilla-base-4.12.14-122.156.1 kernel-vanilla-devel-4.12.14-122.156.1 kernel-vanilla-kgraft-devel-4.12.14-122.156.1 kernel-zfcpdump-4.12.14-122.156.1 kernel-zfcpdump-man-4.12.14-122.156.1 kgraft-patch-4_12_14-122_156-default-1-8.3.1 kselftests-kmp-default-4.12.14-122.156.1 kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-Azure-BYOS kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS cluster-md-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS dlm-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS gfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS ocfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS cluster-md-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand dlm-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand gfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand ocfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-BYOS kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-On-Demand cluster-md-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS dlm-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS gfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS ocfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS cluster-md-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand dlm-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand gfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand ocfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-GCE-BYOS kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-GCE-On-Demand cluster-md-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS dlm-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS gfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS ocfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS cluster-md-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand dlm-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand gfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand ocfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand cluster-md-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production dlm-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production gfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production ocfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production cluster-md-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production dlm-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production gfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production kernel-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production ocfs2-kmp-default-4.12.14-122.156.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production cluster-md-kmp-default-4.12.14-122.156.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 dlm-kmp-default-4.12.14-122.156.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 gfs2-kmp-default-4.12.14-122.156.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 ocfs2-kmp-default-4.12.14-122.156.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 kernel-default-kgraft-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-kgraft-devel-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_156-default-1-8.3.1 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-default-base-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-default-devel-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-default-man-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-devel-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-macros-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-source-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-syms-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-default-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default-base-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default-devel-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default-man-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-devel-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-macros-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-syms-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-docs-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 kernel-obs-build-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 kernel-default-extra-4.12.14-122.156.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. CVE-2017-5753 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 important 4.9 AV:L/AC:L/Au:N/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2017-5753.html CVE-2017-5753 https://bugzilla.suse.com/1068032 SUSE Bug 1068032 https://bugzilla.suse.com/1074562 SUSE Bug 1074562 https://bugzilla.suse.com/1074578 SUSE Bug 1074578 https://bugzilla.suse.com/1074701 SUSE Bug 1074701 https://bugzilla.suse.com/1075006 SUSE Bug 1075006 https://bugzilla.suse.com/1075419 SUSE Bug 1075419 https://bugzilla.suse.com/1075748 SUSE Bug 1075748 https://bugzilla.suse.com/1080039 SUSE Bug 1080039 https://bugzilla.suse.com/1087084 SUSE Bug 1087084 https://bugzilla.suse.com/1087939 SUSE Bug 1087939 https://bugzilla.suse.com/1089055 SUSE Bug 1089055 https://bugzilla.suse.com/1136865 SUSE Bug 1136865 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 https://bugzilla.suse.com/1209547 SUSE Bug 1209547 A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms. CVE-2021-3923 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2021-3923.html CVE-2021-3923 https://bugzilla.suse.com/1209778 SUSE Bug 1209778 In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186777253References: Upstream kernel CVE-2022-20567 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2022-20567.html CVE-2022-20567 https://bugzilla.suse.com/1208850 SUSE Bug 1208850 A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, then kernel could be affected. CVE-2023-0590 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2023-0590.html CVE-2023-0590 https://bugzilla.suse.com/1207795 SUSE Bug 1207795 https://bugzilla.suse.com/1207822 SUSE Bug 1207822 https://bugzilla.suse.com/1211495 SUSE Bug 1211495 https://bugzilla.suse.com/1211833 SUSE Bug 1211833 A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters. CVE-2023-1076 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2023-1076.html CVE-2023-1076 https://bugzilla.suse.com/1208599 SUSE Bug 1208599 https://bugzilla.suse.com/1214019 SUSE Bug 1214019 In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference. CVE-2023-1095 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2023-1095.html CVE-2023-1095 https://bugzilla.suse.com/1208777 SUSE Bug 1208777 Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root. This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2. CVE-2023-1281 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2023-1281.html CVE-2023-1281 https://bugzilla.suse.com/1209634 SUSE Bug 1209634 https://bugzilla.suse.com/1209683 SUSE Bug 1209683 https://bugzilla.suse.com/1210335 SUSE Bug 1210335 https://bugzilla.suse.com/1210423 SUSE Bug 1210423 https://bugzilla.suse.com/1211833 SUSE Bug 1211833 A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition. CVE-2023-1390 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2023-1390.html CVE-2023-1390 https://bugzilla.suse.com/1209289 SUSE Bug 1209289 https://bugzilla.suse.com/1210779 SUSE Bug 1210779 https://bugzilla.suse.com/1211495 SUSE Bug 1211495 A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak. CVE-2023-1513 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2023-1513.html CVE-2023-1513 https://bugzilla.suse.com/1209532 SUSE Bug 1209532 cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results). CVE-2023-23454 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2023-23454.html CVE-2023-23454 https://bugzilla.suse.com/1207036 SUSE Bug 1207036 https://bugzilla.suse.com/1207188 SUSE Bug 1207188 https://bugzilla.suse.com/1208030 SUSE Bug 1208030 https://bugzilla.suse.com/1208044 SUSE Bug 1208044 https://bugzilla.suse.com/1208085 SUSE Bug 1208085 https://bugzilla.suse.com/1211833 SUSE Bug 1211833 atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results). CVE-2023-23455 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2023-23455.html CVE-2023-23455 https://bugzilla.suse.com/1207125 SUSE Bug 1207125 https://bugzilla.suse.com/1207189 SUSE Bug 1207189 https://bugzilla.suse.com/1211833 SUSE Bug 1211833 A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of service. CVE-2023-28328 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2023-28328.html CVE-2023-28328 https://bugzilla.suse.com/1209291 SUSE Bug 1209291 hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escalation. CVE-2023-28464 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2023-28464.html CVE-2023-28464 https://bugzilla.suse.com/1209052 SUSE Bug 1209052 https://bugzilla.suse.com/1211111 SUSE Bug 1211111 An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow. CVE-2023-28772 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.156.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.156.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_156-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.156.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.156.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.156.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.156.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231803-1/ https://www.suse.com/security/cve/CVE-2023-28772.html CVE-2023-28772 https://bugzilla.suse.com/1209549 SUSE Bug 1209549 https://bugzilla.suse.com/1211110 SUSE Bug 1211110 https://bugzilla.suse.com/1214378 SUSE Bug 1214378