openSUSE: 2023:3182-1 Important Kernel Security Threats Addressed

The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various

security and bugfixes.

The following security bugs were fixed:

* CVE-2023-3609: Fixed an use-after-free vulnerability in net/sched

(bsc#1213586).

* CVE-2023-3611: Fixed an out-of-bounds write vulnerability in net/sched

(bsc#1213585).

* CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP

device driver functionality that could allow a local user to crash or

potentially escalate their privileges on the system (bsc#1213543).

* CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder

that could allow a local attacker to escalate their privilege (bsc#1213059).

* CVE-2023-31248: Fixed an use-after-free vulnerability in

nft_chain_lookup_byid that could allow a local attacker to escalate their

privilege (bsc#1213061).

* CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter

subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker