Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

openSUSE 15.4: 2023:0146-1 Important Kernel Security Update

opensuse
Calendar Grey January 26, 2023
Scroller Opensuse
This SUSE Security Upgrade resolves 12 vulnerabilities in the Linux Kernel, providing critical patches and various enhancements for system users.
An update that solves 15 vulnerabilities, contains two features and has 36 fixes is now available.

Description

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various

security and bugfixes.

The following security bugs were fixed:

- CVE-2022-3344: Fixed a flaw found in the KVM's AMD nested virtualization

(SVM). A malicious L1 guest could purposely fail to intercept the

shutdown of a cooperative nested guest (L2), possibly leading to a page

fault and kernel panic in the host (L0). (bsc#1204652)

- CVE-2022-4662: Fixed a recursive locking violation in usb-storage that

can cause the kernel to deadlock. (bsc#1206664)

- CVE-2022-3115: Fixed a null pointer dereference in malidp_crtc.c caused

by a lack of checks of the return value of kzalloc. (bsc#1206393)

- CVE-2022-47520: Fixed an out-of-bounds read when parsing a Robust

Security Network (RSN) information element from a Netlink packet.

(bsc#1206515)

- CVE-2022-3112: Fixed a null pointer dereference caused by a missing

check of the return value of kzalloc() in

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security update kernel patch vulnerability important linux kernel openSUSE

Patch

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.4:

zypper in -t patch openSUSE-SLE-15.4-2023-146=1

- SUSE Linux Enterprise Module for Public Cloud 15-SP4:

zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2023-146=1

Package List

- openSUSE Leap 15.4 (aarch64 x86_64):

cluster-md-kmp-azure-5.14.21-150400.14.31.1

cluster-md-kmp-azure-debuginfo-5.14.21-150400.14.31.1

dlm-kmp-azure-5.14.21-150400.14.31.1

dlm-kmp-azure-debuginfo-5.14.21-150400.14.31.1

gfs2-kmp-azure-5.14.21-150400.14.31.1

gfs2-kmp-azure-debuginfo-5.14.21-150400.14.31.1

kernel-azure-5.14.21-150400.14.31.1

kernel-azure-debuginfo-5.14.21-150400.14.31.1

kernel-azure-debugsource-5.14.21-150400.14.31.1

kernel-azure-devel-5.14.21-150400.14.31.1

kernel-azure-devel-debuginfo-5.14.21-150400.14.31.1

kernel-azure-extra-5.14.21-150400.14.31.1

kernel-azure-extra-debuginfo-5.14.21-150400.14.31.1

kernel-azure-livepatch-devel-5.14.21-150400.14.31.1

kernel-azure-optional-5.14.21-150400.14.31.1

kernel-azure-optional-debuginfo-5.14.21-150400.14.31.1

kernel-syms-azure-5.14.21-150400.14.31.1

kselftests-kmp-azure-5.14.21-150400.14.31.1

kselftests-kmp-azure-debuginfo-5.14.21-150400.14.31.1

ocfs2-kmp-azure-5.14.21-150400.14.31.1

ocfs2-kmp-azure-debuginfo-5.14.21-150400.14.31.1

reiserfs-kmp-azure...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2022-3104.html

https://www.suse.com/security/cve/CVE-2022-3105.html

https://www.suse.com/security/cve/CVE-2022-3106.html

https://www.suse.com/security/cve/CVE-2022-3107.html

https://www.suse.com/security/cve/CVE-2022-3108.html

https://www.suse.com/security/cve/CVE-2022-3111.html

https://www.suse.com/security/cve/CVE-2022-3112.html

https://www.suse.com/security/cve/CVE-2022-3113.html

https://www.suse.com/security/cve/CVE-2022-3114.html

https://www.suse.com/security/cve/CVE-2022-3115.html

https://www.suse.com/security/cve/CVE-2022-3344.html

https://www.suse.com/security/cve/CVE-2022-3564.html

https://www.suse.com/security/cve/CVE-2022-4379.html

https://www.suse.com/security/cve/CVE-2022-4662.html

https://www.suse.com/security/cve/CVE-2022-47520.html

https://bugzilla.suse.com/1065729

https://bugzilla.suse.com/1187428

https://bugzilla.suse.com/1188605

https://bugzilla.suse.com/1190969

https://bugzilla.suse.com/1191259

https://bugzilla.suse.com/1193629

https://bugzilla.suse...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2023:0146-1
Rating: important
Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Public Cloud 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 le.

Topics%20covered

Topics Covered

security advisory security update kernel patch vulnerability important linux kernel openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.