openSUSE: 2023:0488-1 Important: Multiple RT Kernel Security Fixes

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various

security and bugfixes.

The following security bugs were fixed:

* CVE-2022-36280: Fixed an out-of-bounds memory access vulnerability that was

found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c (bnc#1203332).

* CVE-2023-0045: Fixed flush IBP in ib_prctl_set() (bsc#1207773).

* CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).

* CVE-2023-0122: Fixed a NULL pointer dereference vulnerability in

nvmet_setup_auth(), that allowed an attacker to perform a Pre-Auth Denial of

Service (DoS) attack on a remote machine (bnc#1207050).

* CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in

net/sched/sch_atm.c because of type confusion (non-negative numbers can

sometimes indicate a TC_ACT_SHOT condition rather than valid classification

results) (bsc#1207125).

* CVE-2023-23454: Fixed denial or service in cbq_classify in

net/sched/sch_cbq.c (bnc#1207036).

* CVE-2020-24588:...