File _patchinfo of Package patchinfo.30212
<patchinfo incident="30212">
<issue id="1206418" tracker="bnc">VUL-0: CVE-2022-40982: transient execution attack "Gather Data Sampling"</issue>
<issue id="1207088" tracker="bnc">Kernel BUG at ../lib/assoc_array.c:652 — ref:_00D1igLOd._5005qJQ2E6:ref</issue>
<issue id="1209342" tracker="bnc">cifs mount becomes inaccessible after about 30 minutes (STATUS_FILE_CLOSED) (bad file descriptor)</issue>
<issue id="1210584" tracker="bnc">VUL-0: kernel: buffer overflow in mtd_ubi build.c:::io_init</issue>
<issue id="1211738" tracker="bnc">VUL-0: CVE-2023-0459: kernel-source-azure,kernel-source-rt,kernel-source: Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check</issue>
<issue id="1211867" tracker="bnc">VUL-0: CVE-2023-2985: kernel-source-azure,kernel-source,kernel-source-rt: hfs: use-after-free issue in hfsplus_release_folio in fs/hfsplus/super.c</issue>
<issue id="1212301" tracker="bnc">[Azure][MANA][VLANTagging] Support for VLAN Tagging for MANA</issue>
<issue id="1212741" tracker="bnc">Missing crossreferences when building kernel-docs with python2 on SLE15</issue>
<issue id="1212835" tracker="bnc">make modules_install fails with kmod-30-4.1</issue>
<issue id="1212846" tracker="bnc">VUL-0: CVE-2023-3390: kernel-source-azure,kernel-source-rt,kernel-source: use-after-free in the netfilter subsystem in net/netfilter/nf_tables_api.c</issue>
<issue id="1213059" tracker="bnc">VUL-0: CVE-2023-35001: kernel: nf_tables nft_byteorder_eval OOB read/write</issue>
<issue id="1213167" tracker="bnc">VUL-0: CVE-2023-3567: kernel-source,kernel-source-rt,kernel-source-azure: use after free in vcs_read() in the vc_screen driver due to race condition</issue>
<issue id="1213245" tracker="bnc">VUL-0: CVE-2023-3117: kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests</issue>
<issue id="1213286" tracker="bnc">VUL-0: CVE-2023-20593: kernel,kernel-firmware: AMD CPU: "ZenBleed": VZEROUPPER does not clear upper bits under certain conditions</issue>
<issue id="1213287" tracker="bnc">VUL-0: CVE-2023-20569: kernel-source, kernel-firmware: AMD CPU "Inception" issue</issue>
<issue id="1213354" tracker="bnc">cifs.ko - backport for fixing DNS resolution over reconnect</issue>
<issue id="1213543" tracker="bnc">VUL-0: CVE-2023-3812: kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags</issue>
<issue id="1213546" tracker="bnc">VUL-0: CVE-2023-34319: xen: buffer overrun in netback due to unusual packet (XSA-432)</issue>
<issue id="1213585" tracker="bnc">VUL-0: CVE-2023-3611: kernel-source-rt,kernel-source,kernel-source-azure: out-of-bounds read/write due to an unbounded overhead value in interface size table</issue>
<issue id="1213586" tracker="bnc">VUL-0: CVE-2023-3609: kernel: use-after-free in net/sched: cls_u32 can lead to local privilege escalation</issue>
<issue id="1213588" tracker="bnc">VUL-0: CVE-2023-3776: kernel-source-rt,kernel-source-azure,kernel-source: use-after-free vulnerability the cls_fw component</issue>
<issue id="1213868" tracker="bnc">kvmsmall config breaks due to asm/microcode_amd.h header inclusion</issue>
<issue id="1213970" tracker="bnc">VUL-0: CVE-2023-4133: kernel-source,kernel-source-rt,kernel-source-azure: cxgb4: use-after-free in ch_flower_stats_cb()</issue>
<issue id="1214019" tracker="bnc">VUL-0: CVE-2023-4194: kernel: tap_open() correctly initialize socket uid next fix of i_uid to current_fsuid</issue>
<issue id="2023-4133" tracker="cve" />
<issue id="2023-34319" tracker="cve" />
<issue id="2023-20569" tracker="cve" />
<issue id="2023-4194" tracker="cve" />
<issue id="2022-40982" tracker="cve" />
<issue id="2023-0459" tracker="cve" />
<issue id="2023-3611" tracker="cve" />
<issue id="2023-3609" tracker="cve" />
<issue id="2023-3776" tracker="cve" />
<issue id="2023-3567" tracker="cve" />
<issue id="2023-3812" tracker="cve" />
<issue id="2023-35001" tracker="cve" />
<issue id="2023-3390" tracker="cve" />
<issue id="2023-3117" tracker="cve" />
<issue id="2023-20593" tracker="cve" />
<issue id="2023-2985" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>jdelvare</packager>
<reboot_needed/>
<description>
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2022-40982: Fixed transient execution attack called "Gather Data Sampling" (bsc#1206418).
- CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
- CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
- CVE-2023-20593: Fixed a ZenBleed issue in "Zen 2" CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
- CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).
- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).
- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
- CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586).
- CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
- CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() bsc#1214019).
The following non-security bugs were fixed:
- arm: cpu: switch to arch_cpu_finalize_init() (bsc#1206418).
- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- fix kabi when adding new cpuid leaves
- get module prefix from kmod (bsc#1212835).
- remove more packaging cruft for sle &lt; 12 sp3
- cifs: fix open leaks in open_cached_dir() (bsc#1209342).
- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- init, x86: move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1206418).
- init: invoke arch_cpu_finalize_init() earlier (bsc#1206418).
- init: provide arch_cpu_finalize_init() (bsc#1206418).
- init: remove check_bugs() leftovers (bsc#1206418).
- kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ("rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps")
- kernel-docs: add buildrequires on python3-base when using python3 the python3 binary is provided by python3-base.
- kernel-docs: use python3 together with python3-sphinx (bsc#1212741).
- keys: do not cache key in task struct if key is requested from kernel thread (bsc#1213354).
- keys: fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).
- net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).
- net: mana: add support for vlan tagging (bsc#1212301).
- rpm/check-for-config-changes: ignore also pahole_has_* we now also have options like config_pahole_has_lang_exclude.
- rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*.
- timers: add shutdown mechanism to the internal functions (bsc#1213970).
- timers: provide timer_shutdown[_sync]() (bsc#1213970).
- timers: rename del_timer() to timer_delete() (bsc#1213970).
- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: replace bug_on()s (bsc#1213970).
- timers: silently ignore timers with a null function (bsc#1213970).
- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: update kernel-doc for various functions (bsc#1213970).
- timers: use del_timer_sync() even on up (bsc#1213970).
- ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).
- ubi: ensure that vid header offset + vid header size &lt;= alloc, size (bsc#1210584).
- usrmerge: adjust module path in the kernel sources (bsc#1212835).
- x86/cpu: switch to arch_cpu_finalize_init() (bsc#1206418).
- x86/fpu: remove cpuinfo argument from init functions (bsc#1206418).
- x86/microcode/AMD: Make stub function static inline (bsc#1213868).
</description>
<summary>Security update for the Linux Kernel</summary>
</patchinfo>
