openSUSE 2023:3680-1 Important Kernel Update For Security Issues

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security

and bugfixes.

The following security bugs were fixed:

* CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in

that allowed a local attacker with a user account on the system to gain

privilege, causing a denial of service (bsc#1203517).

* CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could

allow an attacker to escalate privileges and execute arbitrary code in the

context of the kernel (bsc#1210448).

* CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that

can potentially return speculative data resulting in loss of confidentiality

(bsc#1213927).

* CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a

malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL

pointer leading to a possible kernel crash and denial of service

(bsc#1213666).

* CVE-2023-3812: Fixed an...