SUSE-SU-2024:0478-1: Security update for the Linux Kernel

Published Feb 15, 2024
·
Updated

The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-1086: Fixed a use-after-free vulnerability inside the nftables component that could have been exploited to achieve local privilege escalation (bsc#1219434). CVE-2024-0775: Fixed use-after-free in ext4remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219053). CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receiveencryptedstandard in fs/smb/client/smb2ops.c (bsc#1218832). CVE-2023-6915: Fixed a NULL pointer dereference problem in idafree in lib/idr.c (bsc#1218804). CVE-2023-6536: Fixed a NULL pointer dereference in nvmetreqcomplete (bsc#1217989). CVE-2023-6535: Fixed a NULL pointer dereference in nvmettcpexecuterequest (bsc#1217988). CVE-2023-6356: Fixed a NULL pointer dereference in nvmettcpbuildpduiovec (bsc#1217987). CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of a safeguard against invalid nftables family (pf) values within nftablesnewtable function (bsc#1218752). CVE-2023-51782: Fixed use-after-free in roseioctl in net/rose/afrose.c because of a roseaccept race condition (bsc#1218757). CVE-2023-51780: Fixed a use-after-free in dovccioctl in net/atm/ioctl.c, because of a vccrecvmsg race condition (bsc#1218730). CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drmatomic.c (bsc#1219120). CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalation (bsc#1215275). CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code inside the brcm80211 component (bsc#1216702). CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment (bsc#1218836). CVE-2021-33631: Fixed an integer overflow in ext4writeinlinedataend() (bsc#1219412). The following non-security bugs were fixed: build: Limit kernel-source build to architectures for which the kernel binary is built (bsc#1108281). docs: Store the old kernel changelog entries in kernel-docs package (bsc#1218713) mkspec: Include constraints for both multibuild and plain package always rpm/kernel-docs.spec.in: fix build with 6.8 Since upstream commit f061c9f7d058 rpm/kernel-source.rpmlintrc: add action-ebpf Upstream commit a79d8ba734bd rpm/mkspec: use kernel-source: prefix for constraints on multibuild Otherwise the constraints are not applied with multibuild enabled. x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).

Affected Software

96 affected componentsFixes available
All of the following
SUSE SUSE Linux Enterprise Live Patching 15-SP2 (nosrc)
suse/kernel-default<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64)
Any of the following
suse/kernel-default-debugsource<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-livepatch<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-livepatch<5_3_18-150200_24_178-default-debuginfo-1-150200.5.3.1
5_3_18-150200_24_178-default-debuginfo-1-150200.5.3.1
suse/kernel-default-livepatch-devel<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-livepatch<5_3_18-150200_24_178-default-1-150200.5.3.1
5_3_18-150200_24_178-default-1-150200.5.3.1
All of the following
SUSE SUSE Linux Enterprise High Availability Extension 15 SP2 (aarch64 ppc64le s390x x86_64)
Any of the following
suse/gfs2-kmp-default<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/dlm-kmp-default<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/dlm-kmp-default-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/gfs2-kmp-default-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-debugsource<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/ocfs2-kmp-default<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/cluster-md-kmp-default-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/cluster-md-kmp-default<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/ocfs2-kmp-default-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise High Availability Extension 15 SP2 (nosrc)
suse/kernel-default<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 nosrc x86_64)
Any of the following
suse/kernel-default<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-preempt<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64)
Any of the following
suse/kernel-preempt-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-devel-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-debugsource<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-devel<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-preempt-devel<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-preempt-devel-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-obs-build<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-obs-build-debugsource<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-base<5.3.18-150200.24.178.1.150200.9.91.1
5.3.18-150200.24.178.1.150200.9.91.1
suse/kernel-preempt-debugsource<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-syms<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch)
Any of the following
suse/kernel-devel<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-macros<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-source<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch nosrc)
suse/kernel-docs<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64 nosrc)
suse/kernel-default<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64)
Any of the following
suse/kernel-default-devel-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/reiserfs-kmp-default-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-debugsource<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-devel<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-obs-build<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/reiserfs-kmp-default<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-obs-build-debugsource<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-base<5.3.18-150200.24.178.1.150200.9.91.1
5.3.18-150200.24.178.1.150200.9.91.1
suse/kernel-syms<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch)
Any of the following
suse/kernel-devel<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-macros<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-source<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch nosrc)
suse/kernel-docs<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 nosrc x86_64)
suse/kernel-preempt<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 x86_64)
Any of the following
suse/kernel-preempt-devel<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-preempt-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-preempt-devel-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-preempt-debugsource<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (nosrc ppc64le x86_64)
suse/kernel-default<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64)
Any of the following
suse/kernel-default-devel-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/reiserfs-kmp-default-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-debugsource<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-devel<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-obs-build<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/reiserfs-kmp-default<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-obs-build-debugsource<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-default-base<5.3.18-150200.24.178.1.150200.9.91.1
5.3.18-150200.24.178.1.150200.9.91.1
suse/kernel-syms<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch)
Any of the following
suse/kernel-devel<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-macros<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-source<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch nosrc)
suse/kernel-docs<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (nosrc x86_64)
suse/kernel-preempt<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64)
Any of the following
suse/kernel-preempt-devel<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-preempt-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-preempt-devel-debuginfo<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1
suse/kernel-preempt-debugsource<5.3.18-150200.24.178.1
5.3.18-150200.24.178.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade suse/kernel-default to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  2. Upgrade

    Upgrade suse/kernel-default-debugsource to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  3. Upgrade

    Upgrade suse/kernel-default-livepatch to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  4. Upgrade

    Upgrade suse/kernel-default-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  5. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 5_3_18-150200_24_178-default-debuginfo-1-150200.5.3.1
  6. Upgrade

    Upgrade suse/kernel-default-livepatch-devel to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  7. Upgrade

    Upgrade suse/kernel-livepatch to a version that resolves this vulnerability.

    Fixed in 5_3_18-150200_24_178-default-1-150200.5.3.1
  8. Upgrade

    Upgrade suse/gfs2-kmp-default to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  9. Upgrade

    Upgrade suse/dlm-kmp-default to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  10. Upgrade

    Upgrade suse/dlm-kmp-default-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  11. Upgrade

    Upgrade suse/gfs2-kmp-default-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  12. Upgrade

    Upgrade suse/ocfs2-kmp-default to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  13. Upgrade

    Upgrade suse/cluster-md-kmp-default-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  14. Upgrade

    Upgrade suse/cluster-md-kmp-default to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  15. Upgrade

    Upgrade suse/ocfs2-kmp-default-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  16. Upgrade

    Upgrade suse/kernel-preempt to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  17. Upgrade

    Upgrade suse/kernel-preempt-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  18. Upgrade

    Upgrade suse/kernel-default-devel-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  19. Upgrade

    Upgrade suse/kernel-default-devel to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  20. Upgrade

    Upgrade suse/kernel-preempt-devel to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  21. Upgrade

    Upgrade suse/kernel-preempt-devel-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  22. Upgrade

    Upgrade suse/kernel-obs-build to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  23. Upgrade

    Upgrade suse/kernel-obs-build-debugsource to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  24. Upgrade

    Upgrade suse/kernel-default-base to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1.150200.9.91.1
  25. Upgrade

    Upgrade suse/kernel-preempt-debugsource to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  26. Upgrade

    Upgrade suse/kernel-syms to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  27. Upgrade

    Upgrade suse/kernel-devel to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  28. Upgrade

    Upgrade suse/kernel-macros to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  29. Upgrade

    Upgrade suse/kernel-source to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  30. Upgrade

    Upgrade suse/kernel-docs to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  31. Upgrade

    Upgrade suse/reiserfs-kmp-default-debuginfo to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  32. Upgrade

    Upgrade suse/reiserfs-kmp-default to a version that resolves this vulnerability.

    Fixed in 5.3.18-150200.24.178.1
  33. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Module-Live-Patching-15-SP2-2024-478=1
  34. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Product-HA-15-SP2-2024-478=1
  35. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-478=1
  36. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-478=1
  37. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-478=1

Event History

Feb 15, 2024
Advisory Published
via SUSE·12:30 PM

Child vulnerabilities

Contains the following vulnerabilities.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203