Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3324-1 Final 1 1 2023-08-16T06:13:06Z current 2023-08-16T06:13:06Z 2023-08-16T06:13:06Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-20784: Fixed a denial of service (infinite loop in update_blocked_averages) by mishandled leaf cfs_rq in kernel/sched/fair.c (bsc#1126703). - CVE-2018-3639: Fixed Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1087082). - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287). - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867). - CVE-2023-3106: Fixed crash in XFRM_MSG_GETSA netlink handler (bsc#1213251). - CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167). - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585). - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588). The following non-security bugs were fixed: - net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585). - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584). - ubi: ensure that VID header offset + VID header size <= alloc, size (bsc#1210584). - x86: Treat R_X86_64_PLT32 as R_X86_64_PC32 (git-fixes) No it's not git-fixes it's used to make sle12-sp2 compile with newer toolchain to make the life of all the poor souls maintaining this ancient kernel on their modern machines, a little bit easier.... The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-3324,SUSE-SLE-SERVER-12-SP2-BCL-2023-3324 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ Link for SUSE-SU-2023:3324-1 https://lists.suse.com/pipermail/sle-updates/2023-August/031024.html E-Mail link for SUSE-SU-2023:3324-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1126703 SUSE Bug 1126703 https://bugzilla.suse.com/1206418 SUSE Bug 1206418 https://bugzilla.suse.com/1207561 SUSE Bug 1207561 https://bugzilla.suse.com/1209779 SUSE Bug 1209779 https://bugzilla.suse.com/1210584 SUSE Bug 1210584 https://bugzilla.suse.com/1211738 SUSE Bug 1211738 https://bugzilla.suse.com/1211867 SUSE Bug 1211867 https://bugzilla.suse.com/1212502 SUSE Bug 1212502 https://bugzilla.suse.com/1213059 SUSE Bug 1213059 https://bugzilla.suse.com/1213167 SUSE Bug 1213167 https://bugzilla.suse.com/1213251 SUSE Bug 1213251 https://bugzilla.suse.com/1213286 SUSE Bug 1213286 https://bugzilla.suse.com/1213287 SUSE Bug 1213287 https://bugzilla.suse.com/1213585 SUSE Bug 1213585 https://bugzilla.suse.com/1213588 SUSE Bug 1213588 https://www.suse.com/security/cve/CVE-2018-20784/ SUSE CVE CVE-2018-20784 page https://www.suse.com/security/cve/CVE-2018-3639/ SUSE CVE CVE-2018-3639 page https://www.suse.com/security/cve/CVE-2022-40982/ SUSE CVE CVE-2022-40982 page https://www.suse.com/security/cve/CVE-2023-0459/ SUSE CVE CVE-2023-0459 page https://www.suse.com/security/cve/CVE-2023-1637/ SUSE CVE CVE-2023-1637 page https://www.suse.com/security/cve/CVE-2023-20569/ SUSE CVE CVE-2023-20569 page https://www.suse.com/security/cve/CVE-2023-20593/ SUSE CVE CVE-2023-20593 page https://www.suse.com/security/cve/CVE-2023-2985/ SUSE CVE CVE-2023-2985 page https://www.suse.com/security/cve/CVE-2023-3106/ SUSE CVE CVE-2023-3106 page https://www.suse.com/security/cve/CVE-2023-3268/ SUSE CVE CVE-2023-3268 page https://www.suse.com/security/cve/CVE-2023-35001/ SUSE CVE CVE-2023-35001 page https://www.suse.com/security/cve/CVE-2023-3567/ SUSE CVE CVE-2023-3567 page https://www.suse.com/security/cve/CVE-2023-3611/ SUSE CVE CVE-2023-3611 page https://www.suse.com/security/cve/CVE-2023-3776/ SUSE CVE CVE-2023-3776 page SUSE Linux Enterprise Server 12 SP2-BCL cluster-md-kmp-debug-4.4.121-92.208.1 cluster-md-kmp-default-4.4.121-92.208.1 cluster-md-kmp-vanilla-4.4.121-92.208.1 cluster-network-kmp-debug-4.4.121-92.208.1 cluster-network-kmp-default-4.4.121-92.208.1 cluster-network-kmp-vanilla-4.4.121-92.208.1 dlm-kmp-debug-4.4.121-92.208.1 dlm-kmp-default-4.4.121-92.208.1 dlm-kmp-vanilla-4.4.121-92.208.1 gfs2-kmp-debug-4.4.121-92.208.1 gfs2-kmp-default-4.4.121-92.208.1 gfs2-kmp-vanilla-4.4.121-92.208.1 kernel-debug-4.4.121-92.208.1 kernel-debug-base-4.4.121-92.208.1 kernel-debug-devel-4.4.121-92.208.1 kernel-debug-extra-4.4.121-92.208.1 kernel-debug-kgraft-4.4.121-92.208.1 kernel-default-4.4.121-92.208.1 kernel-default-base-4.4.121-92.208.1 kernel-default-devel-4.4.121-92.208.1 kernel-default-extra-4.4.121-92.208.1 kernel-default-kgraft-4.4.121-92.208.1 kernel-default-man-4.4.121-92.208.1 kernel-devel-4.4.121-92.208.1 kernel-docs-4.4.121-92.208.1 kernel-docs-html-4.4.121-92.208.1 kernel-docs-pdf-4.4.121-92.208.1 kernel-macros-4.4.121-92.208.1 kernel-obs-build-4.4.121-92.208.1 kernel-obs-qa-4.4.121-92.208.1 kernel-source-4.4.121-92.208.1 kernel-source-vanilla-4.4.121-92.208.1 kernel-syms-4.4.121-92.208.1 kernel-vanilla-4.4.121-92.208.1 kernel-vanilla-base-4.4.121-92.208.1 kernel-vanilla-devel-4.4.121-92.208.1 kernel-zfcpdump-4.4.121-92.208.1 ocfs2-kmp-debug-4.4.121-92.208.1 ocfs2-kmp-default-4.4.121-92.208.1 ocfs2-kmp-vanilla-4.4.121-92.208.1 kernel-default-4.4.121-92.208.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-base-4.4.121-92.208.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-devel-4.4.121-92.208.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-devel-4.4.121-92.208.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-macros-4.4.121-92.208.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-source-4.4.121-92.208.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-syms-4.4.121-92.208.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load. CVE-2018-20784 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2018-20784.html CVE-2018-20784 https://bugzilla.suse.com/1126703 SUSE Bug 1126703 Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4. CVE-2018-3639 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2018-3639.html CVE-2018-3639 https://bugzilla.suse.com/1074701 SUSE Bug 1074701 https://bugzilla.suse.com/1085235 SUSE Bug 1085235 https://bugzilla.suse.com/1085308 SUSE Bug 1085308 https://bugzilla.suse.com/1087078 SUSE Bug 1087078 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1092631 SUSE Bug 1092631 https://bugzilla.suse.com/1092885 SUSE Bug 1092885 https://bugzilla.suse.com/1094912 SUSE Bug 1094912 https://bugzilla.suse.com/1098813 SUSE Bug 1098813 https://bugzilla.suse.com/1100394 SUSE Bug 1100394 https://bugzilla.suse.com/1102640 SUSE Bug 1102640 https://bugzilla.suse.com/1105412 SUSE Bug 1105412 https://bugzilla.suse.com/1111963 SUSE Bug 1111963 https://bugzilla.suse.com/1172781 SUSE Bug 1172781 https://bugzilla.suse.com/1172782 SUSE Bug 1172782 https://bugzilla.suse.com/1172783 SUSE Bug 1172783 https://bugzilla.suse.com/1173489 SUSE Bug 1173489 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2022-40982 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2022-40982.html CVE-2022-40982 https://bugzilla.suse.com/1206418 SUSE Bug 1206418 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47 CVE-2023-0459 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2023-0459.html CVE-2023-0459 https://bugzilla.suse.com/1211738 SUSE Bug 1211738 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks. CVE-2023-1637 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2023-1637.html CVE-2023-1637 https://bugzilla.suse.com/1209779 SUSE Bug 1209779 A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure. CVE-2023-20569 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2023-20569.html CVE-2023-20569 https://bugzilla.suse.com/1213287 SUSE Bug 1213287 An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. CVE-2023-20593 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2023-20593.html CVE-2023-20593 https://bugzilla.suse.com/1213286 SUSE Bug 1213286 https://bugzilla.suse.com/1213616 SUSE Bug 1213616 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial of service problem. CVE-2023-2985 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2023-2985.html CVE-2023-2985 https://bugzilla.suse.com/1211867 SUSE Bug 1211867 A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely. CVE-2023-3106 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2023-3106.html CVE-2023-3106 https://bugzilla.suse.com/1213251 SUSE Bug 1213251 An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information. CVE-2023-3268 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2023-3268.html CVE-2023-3268 https://bugzilla.suse.com/1212502 SUSE Bug 1212502 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace CVE-2023-35001 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2023-35001.html CVE-2023-35001 https://bugzilla.suse.com/1213059 SUSE Bug 1213059 https://bugzilla.suse.com/1213063 SUSE Bug 1213063 A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information. CVE-2023-3567 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2023-3567.html CVE-2023-3567 https://bugzilla.suse.com/1213167 SUSE Bug 1213167 https://bugzilla.suse.com/1213244 SUSE Bug 1213244 https://bugzilla.suse.com/1213842 SUSE Bug 1213842 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64. CVE-2023-3611 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2023-3611.html CVE-2023-3611 https://bugzilla.suse.com/1213585 SUSE Bug 1213585 A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f. CVE-2023-3776 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.208.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.208.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233324-1/ https://www.suse.com/security/cve/CVE-2023-3776.html CVE-2023-3776 https://bugzilla.suse.com/1213588 SUSE Bug 1213588 https://bugzilla.suse.com/1215119 SUSE Bug 1215119 https://bugzilla.suse.com/1215674 SUSE Bug 1215674