Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3392-1 Final 1 1 2023-08-23T15:35:17Z current 2023-08-23T15:35:17Z 2023-08-23T15:35:17Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738). - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287). - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867). - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586). - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585). - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588). - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970). - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() bsc#1214019). The following non-security bugs were fixed: - arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970). - cpufeatures: allow adding more cpuid words - get module prefix from kmod (bsc#1212835). - kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ('rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps') - kernel-docs: add buildrequires on python3-base when using python3 the python3 binary is provided by python3-base. - kernel-docs: use python3 together with python3-sphinx (bsc#1212741). - keys: change keyring_serialise_link_sem to a mutex (bsc#1207088). - keys: fix linking a duplicate key to a keyring's assoc_array (bsc#1207088). - keys: hoist locking out of __key_link_begin() (bsc#1207088). - net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585). - net: mana: add support for vlan tagging (bsc#1212301). - readme.branch: add myself as co-maintainer - remove more packaging cruft for sle < 12 sp3 - rpm/check-for-config-changes: ignore also pahole_has_* we now also have options like config_pahole_has_lang_exclude. - rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*. - timers: add shutdown mechanism to the internal functions (bsc#1213970). - timers: provide timer_shutdown[_sync]() (bsc#1213970). - timers: rename del_timer() to timer_delete() (bsc#1213970). - timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970). - timers: replace bug_on()s (bsc#1213970). - timers: silently ignore timers with a null function (bsc#1213970). - timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970). - timers: update kernel-doc for various functions (bsc#1213970). - timers: use del_timer_sync() even on up (bsc#1213970). - ubi: ensure that vid header offset + vid header size <= alloc, size (bsc#1210584). - ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584). - usrmerge: Adjust module path in the kernel sources (bsc#1212835). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2023-3392,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2023-3392,SUSE-2023-3392,SUSE-SLE-Module-Live-Patching-15-SP1-2023-3392,SUSE-SLE-Product-HA-15-SP1-2023-3392,SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-3392,SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-3392,SUSE-SLE-Product-SLES_SAP-15-SP1-2023-3392,openSUSE-SLE-15.4-2023-3392,openSUSE-SLE-15.5-2023-3392 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ Link for SUSE-SU-2023:3392-1 https://lists.suse.com/pipermail/sle-security-updates/2023-August/015997.html E-Mail link for SUSE-SU-2023:3392-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1206418 SUSE Bug 1206418 https://bugzilla.suse.com/1207088 SUSE Bug 1207088 https://bugzilla.suse.com/1210584 SUSE Bug 1210584 https://bugzilla.suse.com/1211738 SUSE Bug 1211738 https://bugzilla.suse.com/1211867 SUSE Bug 1211867 https://bugzilla.suse.com/1212301 SUSE Bug 1212301 https://bugzilla.suse.com/1212741 SUSE Bug 1212741 https://bugzilla.suse.com/1212835 SUSE Bug 1212835 https://bugzilla.suse.com/1213059 SUSE Bug 1213059 https://bugzilla.suse.com/1213167 SUSE Bug 1213167 https://bugzilla.suse.com/1213286 SUSE Bug 1213286 https://bugzilla.suse.com/1213287 SUSE Bug 1213287 https://bugzilla.suse.com/1213546 SUSE Bug 1213546 https://bugzilla.suse.com/1213585 SUSE Bug 1213585 https://bugzilla.suse.com/1213586 SUSE Bug 1213586 https://bugzilla.suse.com/1213588 SUSE Bug 1213588 https://bugzilla.suse.com/1213970 SUSE Bug 1213970 https://bugzilla.suse.com/1214019 SUSE Bug 1214019 https://www.suse.com/security/cve/CVE-2022-40982/ SUSE CVE CVE-2022-40982 page https://www.suse.com/security/cve/CVE-2023-0459/ SUSE CVE CVE-2023-0459 page https://www.suse.com/security/cve/CVE-2023-20569/ SUSE CVE CVE-2023-20569 page https://www.suse.com/security/cve/CVE-2023-20593/ SUSE CVE CVE-2023-20593 page https://www.suse.com/security/cve/CVE-2023-2985/ SUSE CVE CVE-2023-2985 page https://www.suse.com/security/cve/CVE-2023-34319/ SUSE CVE CVE-2023-34319 page https://www.suse.com/security/cve/CVE-2023-35001/ SUSE CVE CVE-2023-35001 page https://www.suse.com/security/cve/CVE-2023-3567/ SUSE CVE CVE-2023-3567 page https://www.suse.com/security/cve/CVE-2023-3609/ SUSE CVE CVE-2023-3609 page https://www.suse.com/security/cve/CVE-2023-3611/ SUSE CVE CVE-2023-3611 page https://www.suse.com/security/cve/CVE-2023-3776/ SUSE CVE CVE-2023-3776 page https://www.suse.com/security/cve/CVE-2023-4133/ SUSE CVE CVE-2023-4133 page https://www.suse.com/security/cve/CVE-2023-4194/ SUSE CVE CVE-2023-4194 page Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise High Availability Extension 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Live Patching 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP1 openSUSE Leap 15.4 openSUSE Leap 15.5 cluster-md-kmp-default-4.12.14-150100.197.154.1 dlm-kmp-default-4.12.14-150100.197.154.1 gfs2-kmp-default-4.12.14-150100.197.154.1 kernel-default-4.12.14-150100.197.154.1 ocfs2-kmp-default-4.12.14-150100.197.154.1 kernel-debug-4.12.14-150100.197.154.1 kernel-debug-base-4.12.14-150100.197.154.1 kernel-debug-devel-4.12.14-150100.197.154.1 kernel-debug-livepatch-devel-4.12.14-150100.197.154.1 kernel-default-base-4.12.14-150100.197.154.1 kernel-default-devel-4.12.14-150100.197.154.1 kernel-default-extra-4.12.14-150100.197.154.1 kernel-default-livepatch-4.12.14-150100.197.154.1 kernel-default-livepatch-devel-4.12.14-150100.197.154.1 kernel-default-man-4.12.14-150100.197.154.1 kernel-devel-4.12.14-150100.197.154.1 kernel-docs-4.12.14-150100.197.154.1 kernel-docs-html-4.12.14-150100.197.154.1 kernel-kvmsmall-4.12.14-150100.197.154.1 kernel-kvmsmall-base-4.12.14-150100.197.154.1 kernel-kvmsmall-devel-4.12.14-150100.197.154.1 kernel-kvmsmall-livepatch-devel-4.12.14-150100.197.154.1 kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 kernel-macros-4.12.14-150100.197.154.1 kernel-obs-build-4.12.14-150100.197.154.1 kernel-obs-qa-4.12.14-150100.197.154.1 kernel-source-4.12.14-150100.197.154.1 kernel-source-vanilla-4.12.14-150100.197.154.1 kernel-syms-4.12.14-150100.197.154.1 kernel-vanilla-4.12.14-150100.197.154.1 kernel-vanilla-base-4.12.14-150100.197.154.1 kernel-vanilla-devel-4.12.14-150100.197.154.1 kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 kernel-zfcpdump-4.12.14-150100.197.154.1 kernel-zfcpdump-man-4.12.14-150100.197.154.1 kselftests-kmp-default-4.12.14-150100.197.154.1 reiserfs-kmp-default-4.12.14-150100.197.154.1 cluster-md-kmp-default-4.12.14-150100.197.154.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production dlm-kmp-default-4.12.14-150100.197.154.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production gfs2-kmp-default-4.12.14-150100.197.154.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production kernel-default-4.12.14-150100.197.154.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production ocfs2-kmp-default-4.12.14-150100.197.154.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production cluster-md-kmp-default-4.12.14-150100.197.154.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production dlm-kmp-default-4.12.14-150100.197.154.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production gfs2-kmp-default-4.12.14-150100.197.154.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production kernel-default-4.12.14-150100.197.154.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production ocfs2-kmp-default-4.12.14-150100.197.154.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production cluster-md-kmp-default-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP1 dlm-kmp-default-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP1 gfs2-kmp-default-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP1 ocfs2-kmp-default-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP1 kernel-default-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-default-base-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-default-devel-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-devel-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-docs-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-macros-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-obs-build-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-source-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-syms-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-default-livepatch-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Live Patching 15 SP1 kernel-default-livepatch-devel-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Live Patching 15 SP1 kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 as a component of SUSE Linux Enterprise Live Patching 15 SP1 kernel-default-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-base-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-devel-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-man-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-devel-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-docs-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-macros-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-obs-build-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-syms-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS reiserfs-kmp-default-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-default-base-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-default-devel-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-devel-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-docs-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-macros-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-obs-build-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-source-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-syms-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 reiserfs-kmp-default-4.12.14-150100.197.154.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-debug-base-4.12.14-150100.197.154.1 as a component of openSUSE Leap 15.4 kernel-default-man-4.12.14-150100.197.154.1 as a component of openSUSE Leap 15.4 kernel-kvmsmall-base-4.12.14-150100.197.154.1 as a component of openSUSE Leap 15.4 kernel-vanilla-4.12.14-150100.197.154.1 as a component of openSUSE Leap 15.4 kernel-vanilla-base-4.12.14-150100.197.154.1 as a component of openSUSE Leap 15.4 kernel-vanilla-devel-4.12.14-150100.197.154.1 as a component of openSUSE Leap 15.4 kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 as a component of openSUSE Leap 15.4 kernel-zfcpdump-man-4.12.14-150100.197.154.1 as a component of openSUSE Leap 15.4 kernel-vanilla-4.12.14-150100.197.154.1 as a component of openSUSE Leap 15.5 kernel-vanilla-base-4.12.14-150100.197.154.1 as a component of openSUSE Leap 15.5 kernel-vanilla-devel-4.12.14-150100.197.154.1 as a component of openSUSE Leap 15.5 kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 as a component of openSUSE Leap 15.5 Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2022-40982 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2022-40982.html CVE-2022-40982 https://bugzilla.suse.com/1206418 SUSE Bug 1206418 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47 CVE-2023-0459 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2023-0459.html CVE-2023-0459 https://bugzilla.suse.com/1211738 SUSE Bug 1211738 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure. CVE-2023-20569 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2023-20569.html CVE-2023-20569 https://bugzilla.suse.com/1213287 SUSE Bug 1213287 An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. CVE-2023-20593 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2023-20593.html CVE-2023-20593 https://bugzilla.suse.com/1213286 SUSE Bug 1213286 https://bugzilla.suse.com/1213616 SUSE Bug 1213616 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial of service problem. CVE-2023-2985 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2023-2985.html CVE-2023-2985 https://bugzilla.suse.com/1211867 SUSE Bug 1211867 The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver. CVE-2023-34319 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2023-34319.html CVE-2023-34319 https://bugzilla.suse.com/1213546 SUSE Bug 1213546 Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace CVE-2023-35001 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2023-35001.html CVE-2023-35001 https://bugzilla.suse.com/1213059 SUSE Bug 1213059 https://bugzilla.suse.com/1213063 SUSE Bug 1213063 A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information. CVE-2023-3567 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2023-3567.html CVE-2023-3567 https://bugzilla.suse.com/1213167 SUSE Bug 1213167 https://bugzilla.suse.com/1213244 SUSE Bug 1213244 https://bugzilla.suse.com/1213842 SUSE Bug 1213842 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc. CVE-2023-3609 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2023-3609.html CVE-2023-3609 https://bugzilla.suse.com/1213586 SUSE Bug 1213586 https://bugzilla.suse.com/1213587 SUSE Bug 1213587 An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64. CVE-2023-3611 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2023-3611.html CVE-2023-3611 https://bugzilla.suse.com/1213585 SUSE Bug 1213585 A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f. CVE-2023-3776 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2023-3776.html CVE-2023-3776 https://bugzilla.suse.com/1213588 SUSE Bug 1213588 https://bugzilla.suse.com/1215119 SUSE Bug 1215119 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition. CVE-2023-4133 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2023-4133.html CVE-2023-4133 https://bugzilla.suse.com/1213970 SUSE Bug 1213970 A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate. CVE-2023-4194 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-150100.197.154.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.154.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.154.1 openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.154.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233392-1/ https://www.suse.com/security/cve/CVE-2023-4194.html CVE-2023-4194 https://bugzilla.suse.com/1214019 SUSE Bug 1214019