SUSE-SU-2024:0154-1: Security update for the Linux Kernel

Published Jan 18, 2024
·
Updated

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the BDADDR of the peer device to complete pairing without knowledge of the PIN (bsc#1179610 bsc#1215237). CVE-2023-51779: Fixed a use-after-free because of a btsockioctl race condition in btsockrecvmsg (bsc#1218559). CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250). CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947). CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258). CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253). The following non-security bugs were fixed: doc/README.SUSE: Add how to update the config for module signing (jsc#PED-5021) doc/README.SUSE: Remove how to build modules using kernel-source (jsc#PED-5021) doc/README.SUSE: Simplify the list of references (jsc#PED-5021) iouring: fix 32-bit compatability with sendmsg/recvmsg (bsc#1217709).

Affected Software

96 affected componentsFixes available
All of the following
SUSE SUSE Linux Enterprise Live Patching 15-SP2 (nosrc)
suse/kernel-default<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64)
Any of the following
suse/kernel-livepatch<5_3_18-150200_24_175-default-1-150200.5.3.1
5_3_18-150200_24_175-default-1-150200.5.3.1
suse/kernel-default-livepatch<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-livepatch-devel<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-debugsource<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-livepatch<5_3_18-150200_24_175-default-debuginfo-1-150200.5.3.1
5_3_18-150200_24_175-default-debuginfo-1-150200.5.3.1
All of the following
SUSE SUSE Linux Enterprise High Availability Extension 15 SP2 (aarch64 ppc64le s390x x86_64)
Any of the following
suse/cluster-md-kmp-default-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/dlm-kmp-default<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/ocfs2-kmp-default<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/ocfs2-kmp-default-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/gfs2-kmp-default-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/dlm-kmp-default-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-debugsource<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/cluster-md-kmp-default<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/gfs2-kmp-default<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise High Availability Extension 15 SP2 (nosrc)
suse/kernel-default<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 nosrc x86_64)
Any of the following
suse/kernel-default<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-preempt<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64)
Any of the following
suse/kernel-obs-build-debugsource<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-devel-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-syms<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-preempt-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-preempt-devel-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-preempt-devel<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-debugsource<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-preempt-debugsource<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-devel<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-obs-build<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-base<5.3.18-150200.24.175.1.150200.9.89.1
5.3.18-150200.24.175.1.150200.9.89.1
All of the following
SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch)
Any of the following
suse/kernel-source<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-macros<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-devel<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch nosrc)
suse/kernel-docs<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64 nosrc)
suse/kernel-default<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64)
Any of the following
suse/kernel-obs-build-debugsource<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-devel-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-syms<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/reiserfs-kmp-default-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/reiserfs-kmp-default<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-debugsource<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-devel<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-obs-build<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-base<5.3.18-150200.24.175.1.150200.9.89.1
5.3.18-150200.24.175.1.150200.9.89.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch)
Any of the following
suse/kernel-source<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-macros<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-devel<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch nosrc)
suse/kernel-docs<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 nosrc x86_64)
suse/kernel-preempt<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 x86_64)
Any of the following
suse/kernel-preempt-devel-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-preempt-devel<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-preempt-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-preempt-debugsource<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (nosrc ppc64le x86_64)
suse/kernel-default<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64)
Any of the following
suse/kernel-obs-build-debugsource<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-devel-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-syms<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/reiserfs-kmp-default-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/reiserfs-kmp-default<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-debugsource<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-devel<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-obs-build<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-default-base<5.3.18-150200.24.175.1.150200.9.89.1
5.3.18-150200.24.175.1.150200.9.89.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch)
Any of the following
suse/kernel-source<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-macros<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-devel<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch nosrc)
suse/kernel-docs<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (nosrc x86_64)
suse/kernel-preempt<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64)
Any of the following
suse/kernel-preempt-devel-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-preempt-devel<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-preempt-debuginfo<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1
suse/kernel-preempt-debugsource<5.3.18-150200.24.175.1
5.3.18-150200.24.175.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade suse/kernel-default to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  2. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 5_3_18-150200_24_175-default-1-150200.5.3.1
  3. Upgrade

    Upgrade suse/kernel-default-livepatch to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  4. Upgrade

    Upgrade suse/kernel-default-livepatch-devel to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  5. Upgrade

    Upgrade suse/kernel-default-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  6. Upgrade

    Upgrade suse/kernel-default-debugsource to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  7. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 5_3_18-150200_24_175-default-debuginfo-1-150200.5.3.1
  8. Upgrade

    Upgrade suse/cluster-md-kmp-default-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  9. Upgrade

    Upgrade suse/dlm-kmp-default to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  10. Upgrade

    Upgrade suse/ocfs2-kmp-default to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  11. Upgrade

    Upgrade suse/ocfs2-kmp-default-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  12. Upgrade

    Upgrade suse/gfs2-kmp-default-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  13. Upgrade

    Upgrade suse/dlm-kmp-default-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  14. Upgrade

    Upgrade suse/cluster-md-kmp-default to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  15. Upgrade

    Upgrade suse/gfs2-kmp-default to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  16. Upgrade

    Upgrade suse/kernel-preempt to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  17. Upgrade

    Upgrade suse/kernel-obs-build-debugsource to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  18. Upgrade

    Upgrade suse/kernel-default-devel-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  19. Upgrade

    Upgrade suse/kernel-syms to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  20. Upgrade

    Upgrade suse/kernel-preempt-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  21. Upgrade

    Upgrade suse/kernel-preempt-devel-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  22. Upgrade

    Upgrade suse/kernel-preempt-devel to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  23. Upgrade

    Upgrade suse/kernel-preempt-debugsource to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  24. Upgrade

    Upgrade suse/kernel-default-devel to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  25. Upgrade

    Upgrade suse/kernel-obs-build to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  26. Upgrade

    Upgrade suse/kernel-default-base to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1.150200.9.89.1
  27. Upgrade

    Upgrade suse/kernel-source to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  28. Upgrade

    Upgrade suse/kernel-macros to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  29. Upgrade

    Upgrade suse/kernel-devel to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  30. Upgrade

    Upgrade suse/kernel-docs to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  31. Upgrade

    Upgrade suse/reiserfs-kmp-default-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  32. Upgrade

    Upgrade suse/reiserfs-kmp-default to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.175.1
  33. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-154=1
  34. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Product-HA-15-SP2-2024-154=1
  35. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-154=1
  36. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-154=1
  37. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-154=1

Event History

Jan 18, 2024
Advisory Published
via SUSE·04:30 PM

Child vulnerabilities

Contains the following vulnerabilities.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203