SUSE-SU-2024:0474-1: Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-1086: Fixed a use-after-free vulnerability inside the nftables component that could have been exploited to achieve local privilege escalation (bsc#1219434). CVE-2023-51780: Fixed a use-after-free in dovccioctl in net/atm/ioctl.c, because of a vccrecvmsg race condition (bsc#1218730). CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment (bsc#1218836). CVE-2021-33631: Fixed an integer overflow in ext4writeinlinedataend() (bsc#1219412). CVE-2023-6535: Fixed a NULL pointer dereference in nvmettcpexecuterequest (bsc#1217988). CVE-2023-6536: Fixed a NULL pointer dereference in nvmetreqcomplete (bsc#1217989). CVE-2023-6356: Fixed a NULL pointer dereference in nvmettcpbuildpduiovec (bsc#1217987). CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code inside the brcm80211 component (bsc#1216702). CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalation (bsc#1215275). CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drmatomic.c (bsc#1219120). CVE-2024-0775: Fixed use-after-free in ext4remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219053). CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receiveencryptedstandard in fs/smb/client/smb2ops.c (bsc#1218832). CVE-2023-6915: Fixed a NULL pointer dereference problem in idafree in lib/idr.c (bsc#1218804). CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of a safeguard against invalid nftables family (pf) values within nftablesnewtable function (bsc#1218752). CVE-2023-51782: Fixed use-after-free in roseioctl in net/rose/afrose.c because of a roseaccept race condition (bsc#1218757). The following non-security bugs were fixed: Limit kernel-source build to architectures for which the kernel binary is built (bsc#1108281). x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-devel-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-debugsource-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-devel-debuginfo-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/reiserfs-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-preempt-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-preempt-devel-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-default-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-preempt-debugsourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-obs-buildto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-symsto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-obs-build-debugsourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-default-baseto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1.150300.18.88.1 - Upgrade
Upgrade
suse/kernel-default-debugsourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/reiserfs-kmp-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-default-devel-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-sourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-macrosto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-docsto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-source-vanillato a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-docs-htmlto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-debugto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-kvmsmallto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-debug-devel-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-kvmsmall-debugsourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-debug-debugsourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-kvmsmall-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-debug-livepatch-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-debug-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-kvmsmall-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-kvmsmall-devel-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-kvmsmall-livepatch-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kselftests-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/gfs2-kmp-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/cluster-md-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-default-extrato a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-default-extra-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dlm-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/gfs2-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dlm-kmp-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-obs-qato a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/cluster-md-kmp-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kselftests-kmp-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-default-optionalto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/ocfs2-kmp-defaultto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-default-livepatchto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-default-livepatch-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-default-optional-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/ocfs2-kmp-default-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-default-base-rebuildto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1.150300.18.88.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 5_3_18-150300_59_150-default-debuginfo-1-150300.7.3.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 5_3_18-150300_59_150-default-1-150300.7.3.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 5_3_18-150300_59_150-preempt-debuginfo-1-150300.7.3.1 - Upgrade
Upgrade
suse/kernel-livepatchto a version that resolves this vulnerability.Fixed in 5_3_18-150300_59_150-preempt-1-150300.7.3.1 - Upgrade
Upgrade
suse/kselftests-kmp-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dlm-kmp-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/ocfs2-kmp-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/gfs2-kmp-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-preempt-optional-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/reiserfs-kmp-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-preempt-extrato a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/reiserfs-kmp-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/cluster-md-kmp-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-preempt-optionalto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/cluster-md-kmp-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/ocfs2-kmp-preempt-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/gfs2-kmp-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-preempt-extra-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-preempt-livepatch-develto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kselftests-kmp-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dlm-kmp-preemptto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-zfcpdumpto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-zfcpdump-debuginfoto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernel-zfcpdump-debugsourceto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-aarch64to a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-armto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dlm-kmpto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/gfs2-kmpto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-amdto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-zteto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-exynosto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/reiserfs-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-optional-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/ocfs2-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/cluster-md-kmpto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dlm-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-amlogicto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-rockchipto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-optional-debuginfo-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-hisiliconto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-livepatch-devel-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/gfs2-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kselftests-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-broadcomto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/reiserfs-kmpto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-alto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-mediatekto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-socionextto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-sprdto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-alterato a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-renesasto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-allwinnerto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-xilinxto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-nvidiato a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-extra-debuginfo-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-qcomto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-lgto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/ocfs2-kmpto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kernelto a version that resolves this vulnerability.Fixed in 64kb-extra-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-caviumto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/cluster-md-kmpto a version that resolves this vulnerability.Fixed in 64kb-debuginfo-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/kselftests-kmpto a version that resolves this vulnerability.Fixed in 64kb-5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-freescaleto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-apmto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade
suse/dtb-marvellto a version that resolves this vulnerability.Fixed in 5.3.18-150300.59.150.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2024-474=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-474=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HA-15-SP3-2024-474=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-474=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-474=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-474=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.1-2024-474=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2024-474=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2024-474=1
Event History
Child vulnerabilities
Contains the following vulnerabilities.