SUSE-SU-2023:4811-1: Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: CVE-2023-39197: Fixed a out-of-bounds read in nfconntrackdccppacket() (bsc#1216976). CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217332). CVE-2023-45863: Fixed a out-of-bounds write in fillkobjpath() (bsc#1216058). CVE-2023-45871: Fixed an issue in the IGB driver, where the buffer size may not be adequate for frames larger than the MTU (bsc#1216259). CVE-2023-39198: Fixed a race condition leading to use-after-free in qxlmodedumbcreate() (bsc#1216965). CVE-2023-31083: Fixed race condition in hciuartttyioctl (bsc#1210780). CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216584). The following non-security bugs were fixed: ALSA: hda: Disable power-save on KONTRON SinglePC (bsc#1217140). Call flushdelayedfput() from nfsd main-loop (bsc#1217408). net: mana: Configure hwc timeout from hardware (bsc#1214037). net: mana: Fix MANA VF unload when hardware is unresponsive (bsc#1214764). powerpc: Do not clobber f0/vs0 during fp|altivec register save (bsc#1217780).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 5_3_18-150300_59_144-preempt-1-150300.7.3.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 5_3_18-150300_59_144-preempt-debuginfo-1-150300.7.3.1 - Upgrade
Upgrade
suse/kernel-docsto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-source-vanillato a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-docs-htmlto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-macrosto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-sourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-debugto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-kvmsmallto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-kvmsmall-livepatch-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-kvmsmall-devel-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-kvmsmall-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-kvmsmall-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-debug-livepatch-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-debug-devel-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-debug-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-kvmsmall-debugsourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-debug-debugsourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-default-debugsourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-default-optional-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-default-extrato a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kselftests-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dlm-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/gfs2-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-default-optionalto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-default-baseto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1.150300.18.84.1 - Upgrade
Upgrade
suse/kernel-default-extra-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-default-devel-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-default-livepatch-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-symsto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/reiserfs-kmp-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dlm-kmp-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/cluster-md-kmp-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/ocfs2-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kselftests-kmp-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-default-base-rebuildto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1.150300.18.84.1 - Upgrade
Upgrade
suse/kernel-default-livepatchto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/reiserfs-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/cluster-md-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-default-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/ocfs2-kmp-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-obs-qato a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-obs-build-debugsourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-obs-buildto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/gfs2-kmp-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 5_3_18-150300_59_144-default-1-150300.7.3.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 5_3_18-150300_59_144-default-debuginfo-1-150300.7.3.1 - Upgrade
Upgrade
suse/kernel-preempt-optional-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-preempt-optionalto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-preempt-livepatch-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/ocfs2-kmp-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dlm-kmp-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-preempt-extrato a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/cluster-md-kmp-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kselftests-kmp-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/reiserfs-kmp-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/gfs2-kmp-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-preempt-extra-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-preempt-devel-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/reiserfs-kmp-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dlm-kmp-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-preempt-debugsourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/cluster-md-kmp-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/gfs2-kmp-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kselftests-kmp-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-preempt-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/ocfs2-kmp-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-zfcpdumpto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-zfcpdump-debugsourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernel-zfcpdump-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-aarch64to a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-exynosto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-apmto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-qcomto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-devel-debuginfo-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-renesasto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-devel-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-optional-debuginfo-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dlm-kmpto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-allwinnerto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-mediatekto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-caviumto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dlm-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/gfs2-kmpto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-debugsource-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/cluster-md-kmpto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/cluster-md-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/gfs2-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-livepatch-devel-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kselftests-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-nvidiato a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-lgto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-rockchipto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/ocfs2-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-amlogicto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-zteto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-broadcomto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-hisiliconto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-marvellto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-alto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kselftests-kmpto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-extra-debuginfo-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-amdto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-xilinxto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-socionextto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-freescaleto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-armto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/reiserfs-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/ocfs2-kmpto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-optional-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-alterato a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-extra-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/reiserfs-kmpto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/dtb-sprdto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.144.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.144.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2023-4811=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Live-Patching-15-SP3-2023-4811=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HA-15-SP3-2023-4811=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4811=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4811=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4811=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4811=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.1-2023-4811=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2023-4811=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2023-4811=1 - Configuration
Disable power-save on the KONTRON SinglePC.
ALSA HDA on KONTRON SinglePC power-save = disabled
Event History
Child vulnerabilities
Contains the following vulnerabilities.