Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

openSUSE: 2023:4378-1 Important: Kernel Security Update

opensuse
Calendar Grey November 6, 2023
Scroller Opensuse
Essential system patches for Ubuntu Linux. Tackling vulnerabilities and improving operational reliability.
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes

Description

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security

and bugfixes.

The following security bugs were fixed:

* CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to

unsafe code paths being incorrectly marked as safe, resulting in arbitrary

read/write in kernel memory, lateral privilege escalation, and container

escape. (bsc#1215518)

* CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling.

(bsc#1215745).

* CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a

local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read,

leading to a crash or information disclosure. (bsc#1216046)

* CVE-2023-5178: Fixed an UAF in queue intialization setup. (bsc#1215768)

* CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize)

that could cause a local DoS. (bsc#1210778)

* CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory important kernel bug fixes SUSE Linux CVE issue local attacker threat

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.4

zypper in -t patch openSUSE-SLE-15.4-2023-4378=1 SUSE-2023-4378=1

* openSUSE Leap Micro 5.3

zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4378=1

* openSUSE Leap Micro 5.4

zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4378=1

* SUSE Linux Enterprise Micro for Rancher 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2023-4378=1

* SUSE Linux Enterprise Micro 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2023-4378=1

* SUSE Linux Enterprise Micro for Rancher 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2023-4378=1

* SUSE Linux Enterprise Micro 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2023-4378=1

* Basesystem Module 15-SP4

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4378=1

* Development Tools Module 15-SP4

zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4378=1

* Legacy...

Read the Full Advisory

Package List

* openSUSE Leap 15.4 (noarch nosrc)

* kernel-docs-5.14.21-150400.24.97.1

* openSUSE Leap 15.4 (noarch)

* kernel-devel-5.14.21-150400.24.97.1

* kernel-source-5.14.21-150400.24.97.1

* kernel-source-vanilla-5.14.21-150400.24.97.1

* kernel-macros-5.14.21-150400.24.97.1

* kernel-docs-html-5.14.21-150400.24.97.1

* openSUSE Leap 15.4 (nosrc ppc64le x86_64)

* kernel-debug-5.14.21-150400.24.97.1

* openSUSE Leap 15.4 (ppc64le x86_64)

* kernel-debug-debuginfo-5.14.21-150400.24.97.1

* kernel-debug-devel-5.14.21-150400.24.97.1

* kernel-debug-debugsource-5.14.21-150400.24.97.1

* kernel-debug-livepatch-devel-5.14.21-150400.24.97.1

* kernel-debug-devel-debuginfo-5.14.21-150400.24.97.1

* openSUSE Leap 15.4 (aarch64 ppc64le x86_64)

* kernel-kvmsmall-debuginfo-5.14.21-150400.24.97.1

* kernel-default-base-5.14.21-150400.24.97.1.150400.24.44.2

* kernel-default-base-rebuild-5.14.21-150400.24.97.1.150400.24.44.2

* kernel-kvmsmall-devel-debuginfo-5.14.21-150400.24.97.1

* kernel-kvmsmall-devel-5.14.21-150400.24.97.1

*...

Read the Full Advisory

References

* bsc#1208788

* bsc#1210778

* bsc#1211307

* bsc#1212423

* bsc#1212649

* bsc#1213705

* bsc#1213772

* bsc#1214842

* bsc#1215095

* bsc#1215104

* bsc#1215518

* bsc#1215955

* bsc#1215956

* bsc#1215957

* bsc#1215986

* bsc#1216062

* bsc#1216345

* bsc#1216510

* bsc#1216511

* bsc#1216512

* bsc#1216621

## References:

* https://www.suse.com/security/cve/CVE-2023-2163.html

* https://www.suse.com/security/cve/CVE-2023-31085.html

* https://www.suse.com/security/cve/CVE-2023-34324.html

* https://www.suse.com/security/cve/CVE-2023-3777.html

* https://www.suse.com/security/cve/CVE-2023-39189.html

* https://www.suse.com/security/cve/CVE-2023-39193.html

* https://www.suse.com/security/cve/CVE-2023-5178.html

* https://bugzilla.suse.com/show_bug.cgi?id=1208788

* https://bugzilla.suse.com/show_bug.cgi?id=1210778

* https://bugzilla.suse.com/show_bug.cgi?id=1211307

* https://bugzilla.suse.com/show_bug.cgi?id=1212423

* https://bugzilla.suse.com/show_bug.cgi?id=1212649

* https://bugzilla.suse.com/show_bug.cgi?id=1213705

*...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2023:4378-1
Rating: important

Topics%20covered

Topics Covered

security advisory important kernel bug fixes SUSE Linux CVE issue local attacker threat

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.