File _patchinfo of Package patchinfo.27770

<patchinfo incident="27770">
  <issue id="1108488" tracker="bnc">VUL-1: CVE-2018-9517: kernel-source: l2tp: pass tunnel pointer to -&gt;session_create()</issue>
  <issue id="1205705" tracker="bnc">VUL-0: CVE-2022-42895: kernel-source,kernel-source-azure,kernel-source-rt: Information leak in l2cap_parse_conf_req function in net/bluetooth/l2cap_core.c</issue>
  <issue id="1205709" tracker="bnc">VUL-0: CVE-2022-42896: kernel-source,kernel-source-azure,kernel-source-rt: Use after free in l2cap_connect and l2cap_le_connect_req functions in net/bluetooth/l2cap_core.c</issue>
  <issue id="1206073" tracker="bnc">VUL-0: CVE-2022-3564: kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c</issue>
  <issue id="1206113" tracker="bnc">VUL-0: CVE-2022-3643: xen: Guests can trigger NIC interface reset/abort/crash via netback (XSA-423)</issue>
  <issue id="1206664" tracker="bnc">VUL-0: CVE-2022-4662: kernel-source-azure,kernel-source-rt,kernel-source:  Recursive locking violation in usb-storage that can cause the kernel to deadlock</issue>
  <issue id="1206677" tracker="bnc">VUL-0: kernel-source: sctp_diag: fix type confusion in inet_diag_msg_sctpasoc_fill()</issue>
  <issue id="1206784" tracker="bnc">VUL-0: kernel-source: HID: drop assumptions on non-empty lists</issue>
  <issue id="1207036" tracker="bnc">VUL-0: CVE-2023-23454: kernel: type-confusion in the CBQ network scheduler</issue>
  <issue id="1207125" tracker="bnc">VUL-0: CVE-2023-23455: kernel: type-confusion in the ATM network scheduler</issue>
  <issue id="1207186" tracker="bnc">VUL-0: kernel-source,kernel-source-rt,kernel-source-azure: HID: betop: check shape of output reports</issue>
  <issue id="1207237" tracker="bnc">VUL-0: CVE-2022-47929: kernel-source,kernel-source-rt,kernel-source-azure: NULL pointer dereference bug in the traffic control subsystem</issue>
  <issue id="2023-23455" tracker="cve" />
  <issue id="2023-23454" tracker="cve" />
  <issue id="2018-9517" tracker="cve" />
  <issue id="2022-47929" tracker="cve" />
  <issue id="2022-4662" tracker="cve" />
  <issue id="2022-3564" tracker="cve" />
  <issue id="2022-3643" tracker="cve" />
  <issue id="2022-42895" tracker="cve" />
  <issue id="2022-42896" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>jbohac</packager>
  <reboot_needed/>
  <description>
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2018-9517: Fixed possible memory corruption due to a use after free in pppol2tp_connect (bsc#1108488).
- CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206073).
- CVE-2022-3643: Fixed reset/abort/crash via netback from VM guest (bsc#1206113).
- CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c's l2cap_parse_conf_req() which can be used to leak kernel pointers remotely (bsc#1205705).
- CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c's l2cap_connect() and l2cap_le_connect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
- CVE-2022-4662: Fixed incorrect access control in the USB core subsystem that could lead a local user to crash the system (bsc#1206664).
- CVE-2022-47929: Fixed NULL pointer dereference bug in the traffic control subsystem (bsc#1207237).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036).
- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207125).

The following non-security bugs were fixed:

- HID: betop: check shape of output reports (git-fixes, bsc#1207186).
- HID: betop: fix slab-out-of-bounds Write in betop_probe (git-fixes).
- HID: check empty report_list in hid_validate_values() (git-fixes, bsc#1206784).
- sctp: fail if no bound addresses can be used for a given scope (bsc#1206677).
</description>
<summary>Security update for the Linux Kernel</summary>
</patchinfo>