SUSE-SU-2023:3680-1: Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517). CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAPNETADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666). CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). CVE-2023-3863: Fixed a use-after-free flaw was found in nfcllcpfindlocal that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). CVE-2023-4128: Fixed a use-after-free flaw in net/sched/clsfw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149). CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a local user to crash the system, causing a denial of service condition (bsc#1213969). CVE-2023-4134: Fixed use-after-free in cyttsp4watchdogwork() (bsc#1213971). CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check (bsc#1214348). CVE-2023-4387: Fixed use-after-free flaw in vmxnet3rqallocrxbuf that could allow a local attacker to crash the system due to a double-free (bsc#1214350). CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3rqcleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451). The following non-security bugs were fixed: kabi/severities: Ignore newly added SRSO mitigation functions x86/cpu/kvm: Provide UNTRAINRETVM (git-fixes). x86/cpu: Cleanup the untrain mess (git-fixes). x86/cpu: Fix x86returnthunk symbol type (git-fixes). x86/cpu: Fix up srsosaferet() and x86returnthunk() (git-fixes). x86/cpu: Rename original retbleed methods (git-fixes). x86/cpu: Rename srso(.)alias to srsoalias\1 (git-fixes). x86/retpoline,kprobes: Fix position of thunk sections with CONFIGLTOCLANG (git-fixes). x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes). x86/retpoline: Do not clobber RFLAGS during srsosaferet() (git-fixes). x86/speculation: Add cpushowgds() prototype (git-fixes). x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes). x86/srso: Correct the mitigation status when SMT is disabled (git-fixes). x86/srso: Disable the mitigation on unaffected configurations (git-fixes). x86/srso: Explain the untraining sequences a bit more (git-fixes). x86/srso: Fix build breakage with the LLVM linker (git-fixes). x86: Move gdsucodemitigated() declaration to header (git-fixes).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/kernel-debugto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-zfcpdumpto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-kvmsmallto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-defaultto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-debug-baseto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-debug-base-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-vanilla-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-vanilla-devel-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-vanilla-baseto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-vanilla-develto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-default-base-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-vanilla-base-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-vanilla-livepatch-develto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-vanilla-debugsourceto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-kvmsmall-baseto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-kvmsmall-base-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-vanillato a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-default-manto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-zfcpdump-manto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-default-debugsourceto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 4_12_14-150100_197_157-default-1-150100.3.3.1 - Upgrade
Upgrade
suse/kernel-default-livepatch-develto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-default-livepatchto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-default-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/cluster-md-kmp-defaultto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/ocfs2-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/cluster-md-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/gfs2-kmp-defaultto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/ocfs2-kmp-defaultto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/dlm-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/gfs2-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/dlm-kmp-defaultto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-obs-buildto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-default-baseto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-symsto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-default-develto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-obs-build-debugsourceto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-default-devel-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-macrosto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-sourceto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-develto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-docsto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/reiserfs-kmp-defaultto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/reiserfs-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-zfcpdump-debugsourceto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade
suse/kernel-zfcpdump-debuginfoto a version that resolves this vulnerability.Fixed in 4.12.14-150100.197.157.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Live-Patching-15-SP1-2023-3680=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HA-15-SP1-2023-3680=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-3680=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-3680=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-3680=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-3680=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2023-3680=1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Which systems should be prioritized for this update?
Systems running SUSE Linux Enterprise 15 SP1 with the affected kernel packages should be prioritized. The update applies to kernel-default and related base, development, debug, symbol, and build packages listed in the advisory.
What level of access would an attacker need for the reported issues?
Several issues require local access: the vmwgfx and TUN/TAP flaws are described as exploitable by a local user account. The XFRM issue requires a malicious user with CAP_NET_ADMIN; the DPT I2O Controller issue is described as potentially allowing privilege escalation and kernel-context code execution.
Are there hardware- or feature-specific exposure considerations?
The speculative-data disclosure issue affects some AMD processors. Other issues are associated with specific kernel functionality or drivers, including vmwgfx, DPT I2O Controller, XFRM, and TUN/TAP.