drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in Linux
Name: |
Mehrere Probleme in Linux |
|
ID: |
SUSE-SU-2023:3333-1 |
|
Distribution: |
SUSE |
|
Plattformen: |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE 11-SP4, SUSE Linux Enterprise Server 11 SP4 |
|
Datum: |
Mi, 16. August 2023, 22:35 |
|
Referenzen: |
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3159
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3567
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3141
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18344
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3776
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3639
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0459
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3268
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3161
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45919
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35824
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40982 |
|
Applikationen: |
Linux |
|
Originalnachricht |
--===============5101738086478385176== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit
# Security update for the Linux Kernel
Announcement ID: SUSE-SU-2023:3333-1 Rating: important References:
* #1087082 * #1102851 * #1205803 * #1206418 * #1211738 * #1212128 * #1212129 * #1212154 * #1212501 * #1212502 * #1213167 * #1213286 * #1213588
Cross-References:
* CVE-2017-18344 * CVE-2018-3639 * CVE-2022-40982 * CVE-2022-45919 * CVE-2023-0459 * CVE-2023-20593 * CVE-2023-3141 * CVE-2023-3159 * CVE-2023-3161 * CVE-2023-3268 * CVE-2023-3567 * CVE-2023-35824 * CVE-2023-3776
CVSS scores:
* CVE-2017-18344 ( SUSE ): 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2017-18344 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2018-3639 ( SUSE ): 4.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2018-3639 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2018-3639 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2022-40982 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2022-40982 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2022-45919 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-45919 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-0459 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-0459 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-20593 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-20593 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-3141 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2023-3141 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2023-3159 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3159 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3161 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3268 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2023-3268 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2023-3567 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3567 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-35824 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-35824 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3776 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3776 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products:
* SUSE Linux Enterprise Server 11 SP4 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE 11-SP4
An update that solves 13 vulnerabilities can now be installed.
## Description:
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
* CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502). * CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after- free (bsc#1213588). * CVE-2022-40982: Fixed transient execution attack called "Gather Data Sampling" (bsc#1206418). * CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167). * CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738). * CVE-2023-20593: Fixed a ZenBleed issue in "Zen 2" CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). * CVE-2018-3639: Fixed Speculative Store Bypass aka "Memory Disambiguation" (bsc#1087082). * CVE-2017-18344: Fixed an OOB access led by an invalid check in timer_create. (bsc#1102851). * CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803). * CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501). * CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). * CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). * CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
The following non-security bugs were fixed:
* fbcon: Check font dimension limits (CVE-2023-3161 bsc#1212154). * firewire: fix potential uaf in outbound_phy_packet_callback() (CVE-2023-3159 bsc#1212128). * kABI: restore _copy_from_user on x86_64 and copy_to_user on x86 (bsc#1211738 CVE-2023-0459). * media: dm1105: Fix use after free bug in dm1105_remove due to race condition (bsc#1212501 CVE-2023-35824). * media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (CVE-2022-45919 bsc#1205803). * memstick: r592: Fix UAF bug in r592_remove due to race condition (CVE-2023-3141 bsc#1212129 bsc#1211449). * net/sched: cls_fw: Fix improper refcount update leads to use-after-free (CVE-2023-3776 bsc#1213588). * pkt_sched: fix error return code in fw_change_attrs() (bsc#1213588). * pkt_sched: fix error return code in fw_change_attrs() (bsc#1213588). * posix-timer: Properly check sigevent->sigev_notify (CVE-2017-18344, bsc#1102851, bsc#1208715). * relayfs: fix out-of-bounds access in relay_file_read (bsc#1212502 CVE-2023-3268). * uaccess: Add speculation barrier to copy_from_user() (bsc#1211738 CVE-2023-0459). * vc_screen: don't clobber return value in vcs_read (bsc#1213167 CVE-2023-3567). * vc_screen: modify vcs_size() handling in vcs_read() (bsc#1213167 CVE-2023-3567). * vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (bsc#1213167 CVE-2023-3567). * x86: Unify copy_from_user() size checking (bsc#1211738 CVE-2023-0459). * x86/copy_user: Unify the code by removing the 64-bit asm _copy_ *_user() variants (bsc#1211738 CVE-2023-0459). * x86/cpu/amd: Add a Zenbleed fix (bsc#1213286, CVE-2023-20593). * x86/speculation: Add Gather Data Sampling mitigation (bsc#1206418, CVE-2022-40982).
## Special Instructions and Notes:
* Please reboot the system after installing this update.
## Patch Instructions:
To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE 11-SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2023-3333=1
* SUSE Linux Enterprise Server 11 SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2023-3333=1
## Package List:
* SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE 11-SP4 (nosrc x86_64) * kernel-default-3.0.101-108.144.1 * kernel-trace-3.0.101-108.144.1 * kernel-xen-3.0.101-108.144.1 * kernel-ec2-3.0.101-108.144.1 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE 11-SP4 (x86_64) * kernel-ec2-devel-3.0.101-108.144.1 * kernel-trace-base-3.0.101-108.144.1 * kernel-default-devel-3.0.101-108.144.1 * kernel-source-3.0.101-108.144.1 * kernel-xen-base-3.0.101-108.144.1 * kernel-default-base-3.0.101-108.144.1 * kernel-trace-devel-3.0.101-108.144.1 * kernel-xen-devel-3.0.101-108.144.1 * kernel-syms-3.0.101-108.144.1 * kernel-ec2-base-3.0.101-108.144.1 * SUSE Linux Enterprise Server 11 SP4 (nosrc x86_64) * kernel-default-3.0.101-108.144.1 * kernel-trace-3.0.101-108.144.1 * kernel-xen-3.0.101-108.144.1 * kernel-ec2-3.0.101-108.144.1 * SUSE Linux Enterprise Server 11 SP4 (x86_64) * kernel-ec2-devel-3.0.101-108.144.1 * kernel-trace-base-3.0.101-108.144.1 * kernel-default-devel-3.0.101-108.144.1 * kernel-source-3.0.101-108.144.1 * kernel-xen-base-3.0.101-108.144.1 * kernel-default-base-3.0.101-108.144.1 * kernel-trace-devel-3.0.101-108.144.1 * kernel-xen-devel-3.0.101-108.144.1 * kernel-syms-3.0.101-108.144.1 * kernel-ec2-base-3.0.101-108.144.1
## References:
* https://www.suse.com/security/cve/CVE-2017-18344.html * https://www.suse.com/security/cve/CVE-2018-3639.html * https://www.suse.com/security/cve/CVE-2022-40982.html * https://www.suse.com/security/cve/CVE-2022-45919.html * https://www.suse.com/security/cve/CVE-2023-0459.html * https://www.suse.com/security/cve/CVE-2023-20593.html * https://www.suse.com/security/cve/CVE-2023-3141.html * https://www.suse.com/security/cve/CVE-2023-3159.html * https://www.suse.com/security/cve/CVE-2023-3161.html * https://www.suse.com/security/cve/CVE-2023-3268.html * https://www.suse.com/security/cve/CVE-2023-3567.html * https://www.suse.com/security/cve/CVE-2023-35824.html * https://www.suse.com/security/cve/CVE-2023-3776.html * https://bugzilla.suse.com/show_bug.cgi?id=1087082 * https://bugzilla.suse.com/show_bug.cgi?id=1102851 * https://bugzilla.suse.com/show_bug.cgi?id=1205803 * https://bugzilla.suse.com/show_bug.cgi?id=1206418 * https://bugzilla.suse.com/show_bug.cgi?id=1211738 * https://bugzilla.suse.com/show_bug.cgi?id=1212128 * https://bugzilla.suse.com/show_bug.cgi?id=1212129 * https://bugzilla.suse.com/show_bug.cgi?id=1212154 * https://bugzilla.suse.com/show_bug.cgi?id=1212501 * https://bugzilla.suse.com/show_bug.cgi?id=1212502 * https://bugzilla.suse.com/show_bug.cgi?id=1213167 * https://bugzilla.suse.com/show_bug.cgi?id=1213286 * https://bugzilla.suse.com/show_bug.cgi?id=1213588
--===============5101738086478385176== Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit
<div class="container"> <h1>Security update for the Linux Kernel</h1>
<table class="table table-striped table-bordered"> <tbody> <tr> <th>Announcement ID:</th> <td>SUSE-SU-2023:3333-1</td> </tr> <tr> <th>Rating:</th> <td>important</td> </tr> <tr> <th>References:</th> <td> <ul> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1087082">#1087082</a> </li> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1102851">#1102851</a> </li> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1205803">#1205803</a> </li> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1206418">#1206418</a> </li> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1211738">#1211738</a> </li> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1212128">#1212128</a> </li> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1212129">#1212129</a> </li> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1212154">#1212154</a> </li> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1212501">#1212501</a> </li> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1212502">#1212502</a> </li> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1213167">#1213167</a> </li> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1213286">#1213286</a> </li> <li style="display: inline;"> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1213588">#1213588</a> </li> </ul> </td> </tr> <tr> <th> Cross-References: </th> <td> <ul> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2017-18344.html">CVE-2017-18344</a> </li> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2018-3639.html">CVE-2018-3639</a> </li> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2022-40982.html">CVE-2022-40982</a> </li> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2022-45919.html">CVE-2022-45919</a> </li> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2023-0459.html">CVE-2023-0459</a> </li> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2023-20593.html">CVE-2023-20593</a> </li> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2023-3141.html">CVE-2023-3141</a> </li> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2023-3159.html">CVE-2023-3159</a> </li> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2023-3161.html">CVE-2023-3161</a> </li> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2023-3268.html">CVE-2023-3268</a> </li> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2023-3567.html">CVE-2023-3567</a> </li> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2023-35824.html">CVE-2023-35824</a> </li> <li style="display: inline;"> <a href="https://www.suse.com/security/cve/CVE-2023-3776.html">CVE-2023-3776</a> </li> </ul> </td> </tr> <tr> <th>CVSS scores:</th> <td> <ul class="list-group"> <li class="list-group-item"> <span class="cvss-reference">CVE-2017-18344</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">7.1</span> <span class="cvss-vector">CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2017-18344</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">5.5</span> <span class="cvss-vector">CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2018-3639</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">4.3</span> <span class="cvss-vector">CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2018-3639</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">5.5</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2018-3639</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">5.5</span> <span class="cvss-vector">CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2022-40982</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">6.2</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2022-40982</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">6.5</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2022-45919</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">7.0</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2022-45919</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">7.0</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-0459</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">4.7</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-0459</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">6.5</span> <span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-20593</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">6.2</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-20593</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">5.5</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-3141</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">6.1</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-3141</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">7.1</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-3159</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">7.8</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-3159</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">6.7</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-3161</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">5.5</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-3161</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">5.5</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-3268</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">6.1</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-3268</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">7.1</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-3567</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">7.8</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-3567</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">6.7</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-35824</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">4.7</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-35824</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">7.0</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-3776</span> <span class="cvss-source"> ( SUSE ): </span> <span class="cvss-score">6.7</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</span> </li> <li class="list-group-item"> <span class="cvss-reference">CVE-2023-3776</span> <span class="cvss-source"> ( NVD ): </span> <span class="cvss-score">7.8</span> <span class="cvss-vector">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</span> </li> </ul> </td> </tr> <tr> <th>Affected Products:</th> <td> <ul class="list-group"> <li class="list-group-item">SUSE Linux Enterprise Server 11 SP4</li> <li class="list-group-item">SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE 11-SP4</li> </ul> </td> </tr> </tbody> </table>
<p>An update that solves 13 vulnerabilities can now be installed.</p>
<h2>Description:</h2> <p>The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.</p> <p>The following security bugs were fixed:</p> <ul> <li>CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).</li> <li>CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).</li> <li>CVE-2022-40982: Fixed transient execution attack called "Gather Data Sampling" (bsc#1206418).</li> <li>CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).</li> <li>CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).</li> <li>CVE-2023-20593: Fixed a ZenBleed issue in "Zen 2" CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).</li> <li>CVE-2018-3639: Fixed Speculative Store Bypass aka "Memory Disambiguation" (bsc#1087082).</li> <li>CVE-2017-18344: Fixed an OOB access led by an invalid check in timer_create. (bsc#1102851).</li> <li>CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803).</li> <li>CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).</li> <li>CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).</li> <li>CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).</li> <li>CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).</li> </ul> <p>The following non-security bugs were fixed:</p> <ul> <li>fbcon: Check font dimension limits (CVE-2023-3161 bsc#1212154).</li> <li>firewire: fix potential uaf in outbound_phy_packet_callback() (CVE-2023-3159 bsc#1212128).</li> <li>kABI: restore _copy_from_user on x86_64 and copy_to_user on x86 (bsc#1211738 CVE-2023-0459).</li> <li>media: dm1105: Fix use after free bug in dm1105_remove due to race condition (bsc#1212501 CVE-2023-35824).</li> <li>media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).</li> <li>memstick: r592: Fix UAF bug in r592_remove due to race condition (CVE-2023-3141 bsc#1212129 bsc#1211449).</li> <li>net/sched: cls_fw: Fix improper refcount update leads to use-after-free (CVE-2023-3776 bsc#1213588).</li> <li>pkt_sched: fix error return code in fw_change_attrs() (bsc#1213588).</li> <li>pkt_sched: fix error return code in fw_change_attrs() (bsc#1213588).</li> <li>posix-timer: Properly check sigevent->sigev_notify (CVE-2017-18344, bsc#1102851, bsc#1208715).</li> <li>relayfs: fix out-of-bounds access in relay_file_read (bsc#1212502 CVE-2023-3268).</li> <li>uaccess: Add speculation barrier to copy_from_user() (bsc#1211738 CVE-2023-0459).</li> <li>vc_screen: don't clobber return value in vcs_read (bsc#1213167 CVE-2023-3567).</li> <li>vc_screen: modify vcs_size() handling in vcs_read() (bsc#1213167 CVE-2023-3567).</li> <li>vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (bsc#1213167 CVE-2023-3567).</li> <li>x86: Unify copy_from_user() size checking (bsc#1211738 CVE-2023-0459).</li> <li>x86/copy_user: Unify the code by removing the 64-bit asm <em>copy</em>*_user() variants (bsc#1211738 CVE-2023-0459).</li> <li>x86/cpu/amd: Add a Zenbleed fix (bsc#1213286, CVE-2023-20593).</li> <li>x86/speculation: Add Gather Data Sampling mitigation (bsc#1206418, CVE-2022-40982).</li> </ul>
<h2>Special Instructions and Notes:</h2> <ul> <li>Please reboot the system after installing this update.</li> </ul>
<h2>Patch Instructions:</h2> <p> To install this SUSE Important update use the SUSE recommended installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product: </p> <ul class="list-group"> <li class="list-group-item"> SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE 11-SP4 <br/> <code>zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2023-3333=1</code> </li> <li class="list-group-item"> SUSE Linux Enterprise Server 11 SP4 <br/> <code>zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2023-3333=1</code> </li> </ul>
<h2>Package List:</h2> <ul> <li> SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE 11-SP4 (nosrc x86_64) <ul> <li>kernel-default-3.0.101-108.144.1</li> <li>kernel-trace-3.0.101-108.144.1</li> <li>kernel-xen-3.0.101-108.144.1</li> <li>kernel-ec2-3.0.101-108.144.1</li> </ul> </li> <li> SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE 11-SP4 (x86_64) <ul> <li>kernel-ec2-devel-3.0.101-108.144.1</li> <li>kernel-trace-base-3.0.101-108.144.1</li> <li>kernel-default-devel-3.0.101-108.144.1</li> <li>kernel-source-3.0.101-108.144.1</li> <li>kernel-xen-base-3.0.101-108.144.1</li> <li>kernel-default-base-3.0.101-108.144.1</li> <li>kernel-trace-devel-3.0.101-108.144.1</li> <li>kernel-xen-devel-3.0.101-108.144.1</li> <li>kernel-syms-3.0.101-108.144.1</li> <li>kernel-ec2-base-3.0.101-108.144.1</li> </ul> </li> <li> SUSE Linux Enterprise Server 11 SP4 (nosrc x86_64) <ul> <li>kernel-default-3.0.101-108.144.1</li> <li>kernel-trace-3.0.101-108.144.1</li> <li>kernel-xen-3.0.101-108.144.1</li> <li>kernel-ec2-3.0.101-108.144.1</li> </ul> </li> <li> SUSE Linux Enterprise Server 11 SP4 (x86_64) <ul> <li>kernel-ec2-devel-3.0.101-108.144.1</li> <li>kernel-trace-base-3.0.101-108.144.1</li> <li>kernel-default-devel-3.0.101-108.144.1</li> <li>kernel-source-3.0.101-108.144.1</li> <li>kernel-xen-base-3.0.101-108.144.1</li> <li>kernel-default-base-3.0.101-108.144.1</li> <li>kernel-trace-devel-3.0.101-108.144.1</li> <li>kernel-xen-devel-3.0.101-108.144.1</li> <li>kernel-syms-3.0.101-108.144.1</li> <li>kernel-ec2-base-3.0.101-108.144.1</li> </ul> </li> </ul>
<h2>References:</h2> <ul> <li> <a href="https://www.suse.com/security/cve/CVE-2017-18344.html">https://www.suse.com/security/cve/CVE-2017-18344.html</a> </li> <li> <a href="https://www.suse.com/security/cve/CVE-2018-3639.html">https://www.suse.com/security/cve/CVE-2018-3639.html</a> </li> <li> <a href="https://www.suse.com/security/cve/CVE-2022-40982.html">https://www.suse.com/security/cve/CVE-2022-40982.html</a> </li> <li> <a href="https://www.suse.com/security/cve/CVE-2022-45919.html">https://www.suse.com/security/cve/CVE-2022-45919.html</a> </li> <li> <a href="https://www.suse.com/security/cve/CVE-2023-0459.html">https://www.suse.com/security/cve/CVE-2023-0459.html</a> </li> <li> <a href="https://www.suse.com/security/cve/CVE-2023-20593.html">https://www.suse.com/security/cve/CVE-2023-20593.html</a> </li> <li> <a href="https://www.suse.com/security/cve/CVE-2023-3141.html">https://www.suse.com/security/cve/CVE-2023-3141.html</a> </li> <li> <a href="https://www.suse.com/security/cve/CVE-2023-3159.html">https://www.suse.com/security/cve/CVE-2023-3159.html</a> </li> <li> <a href="https://www.suse.com/security/cve/CVE-2023-3161.html">https://www.suse.com/security/cve/CVE-2023-3161.html</a> </li> <li> <a href="https://www.suse.com/security/cve/CVE-2023-3268.html">https://www.suse.com/security/cve/CVE-2023-3268.html</a> </li> <li> <a href="https://www.suse.com/security/cve/CVE-2023-3567.html">https://www.suse.com/security/cve/CVE-2023-3567.html</a> </li> <li> <a href="https://www.suse.com/security/cve/CVE-2023-35824.html">https://www.suse.com/security/cve/CVE-2023-35824.html</a> </li> <li> <a href="https://www.suse.com/security/cve/CVE-2023-3776.html">https://www.suse.com/security/cve/CVE-2023-3776.html</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1087082">https://bugzilla.suse.com/show_bug.cgi?id=1087082</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1102851">https://bugzilla.suse.com/show_bug.cgi?id=1102851</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1205803">https://bugzilla.suse.com/show_bug.cgi?id=1205803</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1206418">https://bugzilla.suse.com/show_bug.cgi?id=1206418</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1211738">https://bugzilla.suse.com/show_bug.cgi?id=1211738</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1212128">https://bugzilla.suse.com/show_bug.cgi?id=1212128</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1212129">https://bugzilla.suse.com/show_bug.cgi?id=1212129</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1212154">https://bugzilla.suse.com/show_bug.cgi?id=1212154</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1212501">https://bugzilla.suse.com/show_bug.cgi?id=1212501</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1212502">https://bugzilla.suse.com/show_bug.cgi?id=1212502</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1213167">https://bugzilla.suse.com/show_bug.cgi?id=1213167</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1213286">https://bugzilla.suse.com/show_bug.cgi?id=1213286</a> </li> <li> <a href="https://bugzilla.suse.com/show_bug.cgi?id=1213588">https://bugzilla.suse.com/show_bug.cgi?id=1213588</a> </li> </ul> </div>
--===============5101738086478385176==--
|
|
|
|