Security update for the Linux Kernel

Announcement ID:	SUSE-SU-2023:2611-1
Rating:	important
References:	bsc#1184208 bsc#1199636 bsc#1204405 bsc#1205756 bsc#1205758 bsc#1205760 bsc#1205762 bsc#1205803 bsc#1206024 bsc#1208474 bsc#1208604 bsc#1209287 bsc#1209779 bsc#1210715 bsc#1210783 bsc#1210940 bsc#1211037 bsc#1211043 bsc#1211105 bsc#1211131 bsc#1211186 bsc#1211203 bsc#1211590 bsc#1211592 bsc#1211596 bsc#1211622
Cross-References:	CVE-2020-36694 CVE-2021-29650 CVE-2022-3566 CVE-2022-4269 CVE-2022-45884 CVE-2022-45885 CVE-2022-45886 CVE-2022-45887 CVE-2022-45919 CVE-2023-1079 CVE-2023-1380 CVE-2023-1637 CVE-2023-2156 CVE-2023-2194 CVE-2023-23586 CVE-2023-2483 CVE-2023-2513 CVE-2023-31084 CVE-2023-31436 CVE-2023-32233 CVE-2023-32269 CVE-2023-33288
CVSS scores:	CVE-2020-36694 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H CVE-2020-36694 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-29650 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-29650 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-3566 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-3566 ( NVD ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-4269 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-4269 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-45884 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2022-45884 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-45885 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2022-45885 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-45886 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2022-45886 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-45887 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2022-45887 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-45919 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-45919 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-1079 ( SUSE ): 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-1079 ( NVD ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2023-1380 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2023-1380 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2023-1637 ( SUSE ): 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L CVE-2023-1637 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2023-2156 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-2156 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-2194 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L CVE-2023-2194 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2023-23586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2023-23586 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2023-2483 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2023-2513 ( SUSE ): 6.6 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-2513 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2023-31084 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2023-31084 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2023-31436 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-31436 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-32233 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-32233 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-32269 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-32269 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2023-33288 ( SUSE ): 4.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2023-33288 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products:	openSUSE Leap 15.3 openSUSE Leap 15.4 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Availability Extension 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 SUSE Linux Enterprise Live Patching 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro for Rancher 5.2 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3 SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2

An update that solves 22 vulnerabilities and has four security fixes can now be installed.

Description:

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
• CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
• CVE-2022-3566: Fixed race condition in the TCP Handler (bsc#1204405).
• CVE-2021-29650: Fixed an issue where the netfilter subsystem allowed attackers to cause a denial of service (bsc#1184208).
• CVE-2020-36694: Fixed an use-after-free issue in netfilter in the packet processing context (bsc#1211596).
• CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).
• CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590).
• CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760).
• CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758).
• CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762).
• CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803).
• CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756).
• CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783).
• CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940).
• CVE-2023-2194: Fixed an out-of-bounds write vulnerability in the SLIMpro I2C device driver (bsc#1210715).
• CVE-2023-32269: Fixed a use-after-free in af_netrom.c, related to the fact that accept() was also allowed for a successfully connected AF_NETROM socket (bsc#1211186).
• CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043).
• CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024).
• CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287).
• CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105).
• CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037).
• CVE-2023-23586: Fixed a memory information leak in the io_uring subsystem (bsc#1208474).

The following non-security bugs were fixed:

• SUNRPC: Ensure the transport backchannel association (bsc#1211203).
• hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
• ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).
• s390,dcssblk,dax: Add dax zero_page_range operation to dcssblk driver (bsc#1199636).

Special Instructions and Notes:

• Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• openSUSE Leap 15.3
  zypper in -t patch SUSE-2023-2611=1
• openSUSE Leap 15.4
  zypper in -t patch openSUSE-SLE-15.4-2023-2611=1
• SUSE Linux Enterprise Live Patching 15-SP3
  zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2023-2611=1
  Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates.
• SUSE Linux Enterprise High Availability Extension 15 SP3
  zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2023-2611=1
• SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3
  zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-2611=1
• SUSE Linux Enterprise High Performance Computing LTSS 15 SP3
  zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-2611=1
• SUSE Linux Enterprise Real Time 15 SP3
  zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-2611=1
• SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3
  zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-2611=1
• SUSE Linux Enterprise Server for SAP Applications 15 SP3
  zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-2611=1
• SUSE Manager Proxy 4.2
  zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-2611=1
• SUSE Manager Retail Branch Server 4.2
  zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-2611=1
• SUSE Manager Server 4.2
  zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-2611=1
• SUSE Enterprise Storage 7.1
  zypper in -t patch SUSE-Storage-7.1-2023-2611=1
• SUSE Linux Enterprise Micro 5.1
  zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-2611=1
• SUSE Linux Enterprise Micro 5.2
  zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-2611=1
• SUSE Linux Enterprise Micro for Rancher 5.2
  zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-2611=1

Package List:

• openSUSE Leap 15.3 (noarch nosrc)
  • kernel-docs-5.3.18-150300.59.124.1
• openSUSE Leap 15.3 (noarch)
  • kernel-source-5.3.18-150300.59.124.1
  • kernel-macros-5.3.18-150300.59.124.1
  • kernel-docs-html-5.3.18-150300.59.124.1
  • kernel-source-vanilla-5.3.18-150300.59.124.1
  • kernel-devel-5.3.18-150300.59.124.1
• openSUSE Leap 15.3 (nosrc ppc64le x86_64)
  • kernel-debug-5.3.18-150300.59.124.1
  • kernel-kvmsmall-5.3.18-150300.59.124.1
• openSUSE Leap 15.3 (ppc64le x86_64)
  • kernel-kvmsmall-devel-5.3.18-150300.59.124.1
  • kernel-debug-devel-debuginfo-5.3.18-150300.59.124.1
  • kernel-debug-debugsource-5.3.18-150300.59.124.1
  • kernel-debug-devel-5.3.18-150300.59.124.1
  • kernel-kvmsmall-debuginfo-5.3.18-150300.59.124.1
  • kernel-debug-livepatch-devel-5.3.18-150300.59.124.1
  • kernel-kvmsmall-debugsource-5.3.18-150300.59.124.1
  • kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.124.1
  • kernel-kvmsmall-devel-debuginfo-5.3.18-150300.59.124.1
  • kernel-debug-debuginfo-5.3.18-150300.59.124.1
• openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64)
  • cluster-md-kmp-default-5.3.18-150300.59.124.1
  • gfs2-kmp-default-debuginfo-5.3.18-150300.59.124.1
  • kselftests-kmp-default-debuginfo-5.3.18-150300.59.124.1
  • dlm-kmp-default-debuginfo-5.3.18-150300.59.124.1
  • kernel-default-debuginfo-5.3.18-150300.59.124.1
  • cluster-md-kmp-default-debuginfo-5.3.18-150300.59.124.1
  • reiserfs-kmp-default-debuginfo-5.3.18-150300.59.124.1
  • kernel-obs-build-5.3.18-150300.59.124.1
  • kernel-obs-build-debugsource-5.3.18-150300.59.124.1
  • kernel-default-devel-debuginfo-5.3.18-150300.59.124.1
  • kernel-default-extra-debuginfo-5.3.18-150300.59.124.1
  • kernel-default-optional-debuginfo-5.3.18-150300.59.124.1
  • ocfs2-kmp-default-debuginfo-5.3.18-150300.59.124.1
  • kernel-default-livepatch-5.3.18-150300.59.124.1
  • kernel-default-optional-5.3.18-150300.59.124.1
  • ocfs2-kmp-default-5.3.18-150300.59.124.1
  • kernel-default-base-5.3.18-150300.59.124.1.150300.18.72.1
  • kernel-default-livepatch-devel-5.3.18-150300.59.124.1
  • kernel-obs-qa-5.3.18-150300.59.124.1
  • dlm-kmp-default-5.3.18-150300.59.124.1
  • kernel-default-extra-5.3.18-150300.59.124.1
  • reiserfs-kmp-default-5.3.18-150300.59.124.1
  • gfs2-kmp-default-5.3.18-150300.59.124.1
  • kernel-default-debugsource-5.3.18-150300.59.124.1
  • kernel-default-devel-5.3.18-150300.59.124.1
  • kselftests-kmp-default-5.3.18-150300.59.124.1
  • kernel-default-base-rebuild-5.3.18-150300.59.124.1.150300.18.72.1
  • kernel-syms-5.3.18-150300.59.124.1
• openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 nosrc)
  • kernel-default-5.3.18-150300.59.124.1
• openSUSE Leap 15.3 (ppc64le s390x x86_64)
  • kernel-livepatch-5_3_18-150300_59_124-default-1-150300.7.3.1
  • kernel-livepatch-SLE15-SP3_Update_33-debugsource-1-150300.7.3.1
  • kernel-livepatch-5_3_18-150300_59_124-default-debuginfo-1-150300.7.3.1
• openSUSE Leap 15.3 (x86_64)
  • kernel-livepatch-5_3_18-150300_59_124-preempt-debuginfo-1-150300.7.3.1
  • kernel-livepatch-5_3_18-150300_59_124-preempt-1-150300.7.3.1
• openSUSE Leap 15.3 (aarch64 x86_64)
  • kernel-preempt-debuginfo-5.3.18-150300.59.124.1
  • reiserfs-kmp-preempt-5.3.18-150300.59.124.1
  • gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.124.1
  • kselftests-kmp-preempt-5.3.18-150300.59.124.1
  • ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.124.1
  • kernel-preempt-devel-debuginfo-5.3.18-150300.59.124.1
  • cluster-md-kmp-preempt-5.3.18-150300.59.124.1
  • reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.124.1
  • kernel-preempt-extra-debuginfo-5.3.18-150300.59.124.1
  • kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.124.1
  • kernel-preempt-devel-5.3.18-150300.59.124.1
  • ocfs2-kmp-preempt-5.3.18-150300.59.124.1
  • kernel-preempt-optional-5.3.18-150300.59.124.1
  • cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.124.1
  • kernel-preempt-debugsource-5.3.18-150300.59.124.1
  • gfs2-kmp-preempt-5.3.18-150300.59.124.1
  • kernel-preempt-livepatch-devel-5.3.18-150300.59.124.1
  • dlm-kmp-preempt-debuginfo-5.3.18-150300.59.124.1
  • kernel-preempt-optional-debuginfo-5.3.18-150300.59.124.1
  • kernel-preempt-extra-5.3.18-150300.59.124.1
  • dlm-kmp-preempt-5.3.18-150300.59.124.1
• openSUSE Leap 15.3 (aarch64 nosrc x86_64)
  • kernel-preempt-5.3.18-150300.59.124.1
• openSUSE Leap 15.3 (nosrc s390x)
  • kernel-zfcpdump-5.3.18-150300.59.124.1
• openSUSE Leap 15.3 (s390x)
  • kernel-zfcpdump-debuginfo-5.3.18-150300.59.124.1
  • kernel-zfcpdump-debugsource-5.3.18-150300.59.124.1
• openSUSE Leap 15.3 (nosrc)
  • dtb-aarch64-5.3.18-150300.59.124.1
• openSUSE Leap 15.3 (aarch64)
  • dtb-lg-5.3.18-150300.59.124.1
  • dtb-nvidia-5.3.18-150300.59.124.1
  • dtb-hisilicon-5.3.18-150300.59.124.1
  • dtb-amd-5.3.18-150300.59.124.1
  • dtb-apm-5.3.18-150300.59.124.1
  • reiserfs-kmp-64kb-debuginfo-5.3.18-150300.59.124.1
  • dtb-arm-5.3.18-150300.59.124.1
  • kernel-64kb-debuginfo-5.3.18-150300.59.124.1
  • gfs2-kmp-64kb-5.3.18-150300.59.124.1
  • dlm-kmp-64kb-5.3.18-150300.59.124.1
  • kernel-64kb-livepatch-devel-5.3.18-150300.59.124.1
  • dlm-kmp-64kb-debuginfo-5.3.18-150300.59.124.1
  • dtb-amlogic-5.3.18-150300.59.124.1
  • kernel-64kb-devel-5.3.18-150300.59.124.1
  • ocfs2-kmp-64kb-debuginfo-5.3.18-150300.59.124.1
  • cluster-md-kmp-64kb-5.3.18-150300.59.124.1
  • kernel-64kb-debugsource-5.3.18-150300.59.124.1
  • dtb-altera-5.3.18-150300.59.124.1
  • ocfs2-kmp-64kb-5.3.18-150300.59.124.1
  • kselftests-kmp-64kb-deb