# Security update for the Linux Kernel

Announcement ID: SUSE-SU-2024:0153-1  
Rating: important  
References:

  * bsc#1179610
  * bsc#1215237
  * bsc#1215375
  * bsc#1217250
  * bsc#1217709
  * bsc#1217946
  * bsc#1217947
  * bsc#1218105
  * bsc#1218253
  * bsc#1218258
  * bsc#1218559
  * jsc#PED-5021

  
Cross-References:

  * CVE-2020-26555
  * CVE-2023-51779
  * CVE-2023-6121
  * CVE-2023-6606
  * CVE-2023-6610
  * CVE-2023-6931
  * CVE-2023-6932

  
CVSS scores:

  * CVE-2020-26555 ( SUSE ):  5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
  * CVE-2020-26555 ( NVD ):  5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
  * CVE-2023-51779 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-6121 ( SUSE ):  4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  * CVE-2023-6121 ( NVD ):  4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  * CVE-2023-6606 ( SUSE ):  6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
  * CVE-2023-6606 ( NVD ):  7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
  * CVE-2023-6610 ( SUSE ):  6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
  * CVE-2023-6610 ( NVD ):  7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
  * CVE-2023-6931 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-6931 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-6932 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-6932 ( NVD ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

  
Affected Products:

  * openSUSE Leap 15.3
  * SUSE Enterprise Storage 7.1
  * SUSE Linux Enterprise High Availability Extension 15 SP3
  * SUSE Linux Enterprise High Performance Computing 15 SP3
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3
  * SUSE Linux Enterprise Live Patching 15-SP3
  * SUSE Linux Enterprise Micro 5.1
  * SUSE Linux Enterprise Micro 5.2
  * SUSE Linux Enterprise Micro for Rancher 5.2
  * SUSE Linux Enterprise Server 15 SP3
  * SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3
  * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3
  * SUSE Linux Enterprise Server for SAP Applications 15 SP3
  * SUSE Manager Proxy 4.2
  * SUSE Manager Retail Branch Server 4.2
  * SUSE Manager Server 4.2

  
  
An update that solves seven vulnerabilities, contains one feature and has four
security fixes can now be installed.

## Description:

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security
and bugfixes.

The following security bugs were fixed:

  * CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth
    Core Specification 1.0B that may permit an unauthenticated nearby device to
    spoof the BD_ADDR of the peer device to complete pairing without knowledge
    of the PIN (bsc#1179610 bsc#1215237).
  * CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race
    condition in bt_sock_recvmsg (bsc#1218559).
  * CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP
    subsystem that could lead to information leak (bsc#1217250).
  * CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving
    a malformed length from a server (bsc#1217947).
  * CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing
    debug information (bsc#1217946).
  * CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux
    kernel's Performance Events system component that could lead to local
    privilege escalation. (bsc#1218258).
  * CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's
    ipv4: igmp component that could lead to local privilege escalation
    (bsc#1218253).

The following non-security bugs were fixed:

  * clocksource: Avoid accidental unstable marking of clocksources
    (bsc#1218105).
  * clocksource: Suspend the watchdog temporarily when high read latency
    detected (bsc#1218105).
  * doc/README.SUSE: Add how to update the config for module signing
    (jsc#PED-5021)
  * doc/README.SUSE: Remove how to build modules using kernel-source
    (jsc#PED-5021)
  * doc/README.SUSE: Simplify the list of references (jsc#PED-5021).
  * efi/mokvar: Reserve the table only if it is in boot services data
    (bsc#1215375).
  * io_uring: fix 32-bit compatability with sendmsg/recvmsg (bsc#1217709).

## Special Instructions and Notes:

  * Please reboot the system after installing this update.

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * openSUSE Leap 15.3  
    zypper in -t patch SUSE-2024-153=1

  * SUSE Linux Enterprise Live Patching 15-SP3  
    zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2024-153=1

  * SUSE Linux Enterprise High Availability Extension 15 SP3  
    zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2024-153=1

  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3  
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-153=1

  * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3  
    zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-153=1

  * SUSE Linux Enterprise Server for SAP Applications 15 SP3  
    zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-153=1

  * SUSE Enterprise Storage 7.1  
    zypper in -t patch SUSE-Storage-7.1-2024-153=1

  * SUSE Linux Enterprise Micro 5.1  
    zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-153=1

  * SUSE Linux Enterprise Micro 5.2  
    zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-153=1

  * SUSE Linux Enterprise Micro for Rancher 5.2  
    zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-153=1

## Package List:

  * openSUSE Leap 15.3 (noarch nosrc)
    * kernel-docs-5.3.18-150300.59.147.1
  * openSUSE Leap 15.3 (noarch)
    * kernel-macros-5.3.18-150300.59.147.1
    * kernel-docs-html-5.3.18-150300.59.147.1
    * kernel-source-vanilla-5.3.18-150300.59.147.1
    * kernel-devel-5.3.18-150300.59.147.1
    * kernel-source-5.3.18-150300.59.147.1
  * openSUSE Leap 15.3 (nosrc ppc64le x86_64)
    * kernel-kvmsmall-5.3.18-150300.59.147.2
    * kernel-debug-5.3.18-150300.59.147.2
  * openSUSE Leap 15.3 (ppc64le x86_64)
    * kernel-kvmsmall-debugsource-5.3.18-150300.59.147.2
    * kernel-debug-livepatch-devel-5.3.18-150300.59.147.2
    * kernel-kvmsmall-devel-5.3.18-150300.59.147.2
    * kernel-kvmsmall-debuginfo-5.3.18-150300.59.147.2
    * kernel-debug-devel-5.3.18-150300.59.147.2
    * kernel-kvmsmall-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-debug-debuginfo-5.3.18-150300.59.147.2
    * kernel-debug-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.147.2
    * kernel-debug-debugsource-5.3.18-150300.59.147.2
  * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64)
    * kselftests-kmp-default-5.3.18-150300.59.147.2
    * kernel-default-debuginfo-5.3.18-150300.59.147.2
    * cluster-md-kmp-default-5.3.18-150300.59.147.2
    * kernel-default-optional-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-livepatch-devel-5.3.18-150300.59.147.2
    * kernel-default-extra-5.3.18-150300.59.147.2
    * kernel-obs-qa-5.3.18-150300.59.147.1
    * kernel-default-base-rebuild-5.3.18-150300.59.147.2.150300.18.86.2
    * kernel-default-extra-debuginfo-5.3.18-150300.59.147.2
    * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-devel-5.3.18-150300.59.147.2
    * kernel-syms-5.3.18-150300.59.147.1
    * gfs2-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-debugsource-5.3.18-150300.59.147.2
    * dlm-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-obs-build-5.3.18-150300.59.147.2
    * ocfs2-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-livepatch-5.3.18-150300.59.147.2
    * cluster-md-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-obs-build-debugsource-5.3.18-150300.59.147.2
    * reiserfs-kmp-default-5.3.18-150300.59.147.2
    * ocfs2-kmp-default-5.3.18-150300.59.147.2
    * dlm-kmp-default-5.3.18-150300.59.147.2
    * kernel-default-optional-5.3.18-150300.59.147.2
    * kernel-default-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
    * gfs2-kmp-default-5.3.18-150300.59.147.2
    * kselftests-kmp-default-debuginfo-5.3.18-150300.59.147.2
  * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 nosrc)
    * kernel-default-5.3.18-150300.59.147.2
  * openSUSE Leap 15.3 (ppc64le s390x x86_64)
    * kernel-livepatch-SLE15-SP3_Update_40-debugsource-1-150300.7.3.2
    * kernel-livepatch-5_3_18-150300_59_147-default-debuginfo-1-150300.7.3.2
    * kernel-livepatch-5_3_18-150300_59_147-default-1-150300.7.3.2
  * openSUSE Leap 15.3 (x86_64)
    * kernel-livepatch-5_3_18-150300_59_147-preempt-1-150300.7.3.2
    * kernel-livepatch-5_3_18-150300_59_147-preempt-debuginfo-1-150300.7.3.2
  * openSUSE Leap 15.3 (aarch64 x86_64)
    * cluster-md-kmp-preempt-5.3.18-150300.59.147.2
    * kernel-preempt-optional-5.3.18-150300.59.147.2
    * dlm-kmp-preempt-5.3.18-150300.59.147.2
    * kernel-preempt-livepatch-devel-5.3.18-150300.59.147.2
    * kernel-preempt-debuginfo-5.3.18-150300.59.147.2
    * gfs2-kmp-preempt-5.3.18-150300.59.147.2
    * reiserfs-kmp-preempt-5.3.18-150300.59.147.2
    * ocfs2-kmp-preempt-debuginfo-5.3.18-150300.59.147.2
    * ocfs2-kmp-preempt-5.3.18-150300.59.147.2
    * kernel-preempt-devel-5.3.18-150300.59.147.2
    * gfs2-kmp-preempt-debuginfo-5.3.18-150300.59.147.2
    * kernel-preempt-optional-debuginfo-5.3.18-150300.59.147.2
    * kselftests-kmp-preempt-debuginfo-5.3.18-150300.59.147.2
    * kselftests-kmp-preempt-5.3.18-150300.59.147.2
    * kernel-preempt-extra-5.3.18-150300.59.147.2
    * cluster-md-kmp-preempt-debuginfo-5.3.18-150300.59.147.2
    * dlm-kmp-preempt-debuginfo-5.3.18-150300.59.147.2
    * kernel-preempt-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-preempt-debugsource-5.3.18-150300.59.147.2
    * kernel-preempt-extra-debuginfo-5.3.18-150300.59.147.2
    * reiserfs-kmp-preempt-debuginfo-5.3.18-150300.59.147.2
  * openSUSE Leap 15.3 (aarch64 nosrc x86_64)
    * kernel-preempt-5.3.18-150300.59.147.2
  * openSUSE Leap 15.3 (nosrc s390x)
    * kernel-zfcpdump-5.3.18-150300.59.147.1
  * openSUSE Leap 15.3 (s390x)
    * kernel-zfcpdump-debugsource-5.3.18-150300.59.147.1
    * kernel-zfcpdump-debuginfo-5.3.18-150300.59.147.1
  * openSUSE Leap 15.3 (nosrc)
    * dtb-aarch64-5.3.18-150300.59.147.1
  * openSUSE Leap 15.3 (aarch64)
    * dtb-marvell-5.3.18-150300.59.147.1
    * kernel-64kb-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-64kb-debugsource-5.3.18-150300.59.147.2
    * dlm-kmp-64kb-debuginfo-5.3.18-150300.59.147.2
    * dtb-freescale-5.3.18-150300.59.147.1
    * gfs2-kmp-64kb-5.3.18-150300.59.147.2
    * kselftests-kmp-64kb-debuginfo-5.3.18-150300.59.147.2
    * dtb-zte-5.3.18-150300.59.147.1
    * dlm-kmp-64kb-5.3.18-150300.59.147.2
    * kernel-64kb-extra-debuginfo-5.3.18-150300.59.147.2
    * dtb-lg-5.3.18-150300.59.147.1
    * dtb-renesas-5.3.18-150300.59.147.1
    * dtb-al-5.3.18-150300.59.147.1
    * dtb-allwinner-5.3.18-150300.59.147.1
    * dtb-amd-5.3.18-150300.59.147.1
    * dtb-apm-5.3.18-150300.59.147.1
    * dtb-socionext-5.3.18-150300.59.147.1
    * kernel-64kb-livepatch-devel-5.3.18-150300.59.147.2
    * dtb-sprd-5.3.18-150300.59.147.1
    * dtb-arm-5.3.18-150300.59.147.1
    * ocfs2-kmp-64kb-5.3.18-150300.59.147.2
    * reiserfs-kmp-64kb-debuginfo-5.3.18-150300.59.147.2
    * kernel-64kb-debuginfo-5.3.18-150300.59.147.2
    * kselftests-kmp-64kb-5.3.18-150300.59.147.2
    * ocfs2-kmp-64kb-debuginfo-5.3.18-150300.59.147.2
    * kernel-64kb-extra-5.3.18-150300.59.147.2
    * gfs2-kmp-64kb-debuginfo-5.3.18-150300.59.147.2
    * kernel-64kb-optional-debuginfo-5.3.18-150300.59.147.2
    * dtb-altera-5.3.18-150300.59.147.1
    * kernel-64kb-devel-5.3.18-150300.59.147.2
    * dtb-hisilicon-5.3.18-150300.59.147.1
    * dtb-mediatek-5.3.18-150300.59.147.1
    * dtb-xilinx-5.3.18-150300.59.147.1
    * dtb-broadcom-5.3.18-150300.59.147.1
    * dtb-cavium-5.3.18-150300.59.147.1
    * reiserfs-kmp-64kb-5.3.18-150300.59.147.2
    * dtb-exynos-5.3.18-150300.59.147.1
    * dtb-qcom-5.3.18-150300.59.147.1
    * cluster-md-kmp-64kb-debuginfo-5.3.18-150300.59.147.2
    * kernel-64kb-optional-5.3.18-150300.59.147.2
    * dtb-amlogic-5.3.18-150300.59.147.1
    * dtb-nvidia-5.3.18-150300.59.147.1
    * dtb-rockchip-5.3.18-150300.59.147.1
    * cluster-md-kmp-64kb-5.3.18-150300.59.147.2
  * openSUSE Leap 15.3 (aarch64 nosrc)
    * kernel-64kb-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Live Patching 15-SP3 (nosrc)
    * kernel-default-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64)
    * kernel-default-livepatch-5.3.18-150300.59.147.2
    * kernel-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-debugsource-5.3.18-150300.59.147.2
    * kernel-livepatch-5_3_18-150300_59_147-default-1-150300.7.3.2
    * kernel-default-livepatch-devel-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise High Availability Extension 15 SP3 (aarch64 ppc64le
    s390x x86_64)
    * cluster-md-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * ocfs2-kmp-default-5.3.18-150300.59.147.2
    * gfs2-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * dlm-kmp-default-5.3.18-150300.59.147.2
    * kernel-default-debuginfo-5.3.18-150300.59.147.2
    * cluster-md-kmp-default-5.3.18-150300.59.147.2
    * kernel-default-debugsource-5.3.18-150300.59.147.2
    * ocfs2-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * dlm-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * gfs2-kmp-default-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise High Availability Extension 15 SP3 (nosrc)
    * kernel-default-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 nosrc)
    * kernel-64kb-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64)
    * kernel-64kb-debuginfo-5.3.18-150300.59.147.2
    * kernel-64kb-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-64kb-debugsource-5.3.18-150300.59.147.2
    * kernel-64kb-devel-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 nosrc
    x86_64)
    * kernel-default-5.3.18-150300.59.147.2
    * kernel-preempt-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64
    x86_64)
    * kernel-obs-build-debugsource-5.3.18-150300.59.147.2
    * kernel-preempt-debugsource-5.3.18-150300.59.147.2
    * reiserfs-kmp-default-5.3.18-150300.59.147.2
    * kernel-syms-5.3.18-150300.59.147.1
    * kernel-default-debuginfo-5.3.18-150300.59.147.2
    * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
    * kernel-default-debugsource-5.3.18-150300.59.147.2
    * kernel-preempt-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-obs-build-5.3.18-150300.59.147.2
    * kernel-default-devel-5.3.18-150300.59.147.2
    * kernel-preempt-debuginfo-5.3.18-150300.59.147.2
    * kernel-preempt-devel-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch)
    * kernel-devel-5.3.18-150300.59.147.1
    * kernel-macros-5.3.18-150300.59.147.1
    * kernel-source-5.3.18-150300.59.147.1
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch nosrc)
    * kernel-docs-5.3.18-150300.59.147.1
  * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 nosrc)
    * kernel-64kb-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64)
    * kernel-64kb-debuginfo-5.3.18-150300.59.147.2
    * kernel-64kb-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-64kb-debugsource-5.3.18-150300.59.147.2
    * kernel-64kb-devel-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x
    x86_64 nosrc)
    * kernel-default-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x
    x86_64)
    * kernel-obs-build-debugsource-5.3.18-150300.59.147.2
    * reiserfs-kmp-default-5.3.18-150300.59.147.2
    * kernel-syms-5.3.18-150300.59.147.1
    * kernel-default-debuginfo-5.3.18-150300.59.147.2
    * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
    * kernel-default-debugsource-5.3.18-150300.59.147.2
    * kernel-obs-build-5.3.18-150300.59.147.2
    * kernel-default-devel-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch)
    * kernel-devel-5.3.18-150300.59.147.1
    * kernel-macros-5.3.18-150300.59.147.1
    * kernel-source-5.3.18-150300.59.147.1
  * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch nosrc)
    * kernel-docs-5.3.18-150300.59.147.1
  * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 nosrc x86_64)
    * kernel-preempt-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 x86_64)
    * kernel-preempt-debuginfo-5.3.18-150300.59.147.2
    * kernel-preempt-devel-5.3.18-150300.59.147.2
    * kernel-preempt-debugsource-5.3.18-150300.59.147.2
    * kernel-preempt-devel-debuginfo-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (nosrc s390x)
    * kernel-zfcpdump-5.3.18-150300.59.147.1
  * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (s390x)
    * kernel-zfcpdump-debugsource-5.3.18-150300.59.147.1
    * kernel-zfcpdump-debuginfo-5.3.18-150300.59.147.1
  * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc ppc64le
    x86_64)
    * kernel-default-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64)
    * kernel-obs-build-debugsource-5.3.18-150300.59.147.2
    * reiserfs-kmp-default-5.3.18-150300.59.147.2
    * kernel-syms-5.3.18-150300.59.147.1
    * kernel-default-debuginfo-5.3.18-150300.59.147.2
    * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
    * kernel-default-debugsource-5.3.18-150300.59.147.2
    * kernel-obs-build-5.3.18-150300.59.147.2
    * kernel-default-devel-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch)
    * kernel-devel-5.3.18-150300.59.147.1
    * kernel-macros-5.3.18-150300.59.147.1
    * kernel-source-5.3.18-150300.59.147.1
  * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch nosrc)
    * kernel-docs-5.3.18-150300.59.147.1
  * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (nosrc x86_64)
    * kernel-preempt-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64)
    * kernel-preempt-debuginfo-5.3.18-150300.59.147.2
    * kernel-preempt-devel-5.3.18-150300.59.147.2
    * kernel-preempt-debugsource-5.3.18-150300.59.147.2
    * kernel-preempt-devel-debuginfo-5.3.18-150300.59.147.2
  * SUSE Enterprise Storage 7.1 (aarch64 nosrc)
    * kernel-64kb-5.3.18-150300.59.147.2
  * SUSE Enterprise Storage 7.1 (aarch64)
    * kernel-64kb-debuginfo-5.3.18-150300.59.147.2
    * kernel-64kb-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-64kb-debugsource-5.3.18-150300.59.147.2
    * kernel-64kb-devel-5.3.18-150300.59.147.2
  * SUSE Enterprise Storage 7.1 (aarch64 nosrc x86_64)
    * kernel-default-5.3.18-150300.59.147.2
    * kernel-preempt-5.3.18-150300.59.147.2
  * SUSE Enterprise Storage 7.1 (aarch64 x86_64)
    * kernel-obs-build-debugsource-5.3.18-150300.59.147.2
    * kernel-preempt-debugsource-5.3.18-150300.59.147.2
    * reiserfs-kmp-default-5.3.18-150300.59.147.2
    * kernel-syms-5.3.18-150300.59.147.1
    * kernel-default-debuginfo-5.3.18-150300.59.147.2
    * reiserfs-kmp-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
    * kernel-default-debugsource-5.3.18-150300.59.147.2
    * kernel-preempt-devel-debuginfo-5.3.18-150300.59.147.2
    * kernel-obs-build-5.3.18-150300.59.147.2
    * kernel-default-devel-5.3.18-150300.59.147.2
    * kernel-preempt-debuginfo-5.3.18-150300.59.147.2
    * kernel-preempt-devel-5.3.18-150300.59.147.2
  * SUSE Enterprise Storage 7.1 (noarch)
    * kernel-devel-5.3.18-150300.59.147.1
    * kernel-macros-5.3.18-150300.59.147.1
    * kernel-source-5.3.18-150300.59.147.1
  * SUSE Enterprise Storage 7.1 (noarch nosrc)
    * kernel-docs-5.3.18-150300.59.147.1
  * SUSE Linux Enterprise Micro 5.1 (aarch64 nosrc s390x x86_64)
    * kernel-default-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64)
    * kernel-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
    * kernel-default-debugsource-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Micro 5.2 (aarch64 nosrc s390x x86_64)
    * kernel-default-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Micro 5.2 (aarch64 x86_64)
    * kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
  * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64)
    * kernel-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-debugsource-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 nosrc s390x x86_64)
    * kernel-default-5.3.18-150300.59.147.2
  * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 x86_64)
    * kernel-default-base-5.3.18-150300.59.147.2.150300.18.86.2
  * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64)
    * kernel-default-debuginfo-5.3.18-150300.59.147.2
    * kernel-default-debugsource-5.3.18-150300.59.147.2

## References:

  * https://www.suse.com/security/cve/CVE-2020-26555.html
  * https://www.suse.com/security/cve/CVE-2023-51779.html
  * https://www.suse.com/security/cve/CVE-2023-6121.html
  * https://www.suse.com/security/cve/CVE-2023-6606.html
  * https://www.suse.com/security/cve/CVE-2023-6610.html
  * https://www.suse.com/security/cve/CVE-2023-6931.html
  * https://www.suse.com/security/cve/CVE-2023-6932.html
  * https://bugzilla.suse.com/show_bug.cgi?id=1179610
  * https://bugzilla.suse.com/show_bug.cgi?id=1215237
  * https://bugzilla.suse.com/show_bug.cgi?id=1215375
  * https://bugzilla.suse.com/show_bug.cgi?id=1217250
  * https://bugzilla.suse.com/show_bug.cgi?id=1217709
  * https://bugzilla.suse.com/show_bug.cgi?id=1217946
  * https://bugzilla.suse.com/show_bug.cgi?id=1217947
  * https://bugzilla.suse.com/show_bug.cgi?id=1218105
  * https://bugzilla.suse.com/show_bug.cgi?id=1218253
  * https://bugzilla.suse.com/show_bug.cgi?id=1218258
  * https://bugzilla.suse.com/show_bug.cgi?id=1218559
  * https://jira.suse.com/login.jsp

SUSE: 2024:0153-1 important: the Linux Kernel

January 18, 2024
* bsc#1179610 * bsc#1215237 * bsc#1215375 * bsc#1217250 * bsc#1217709

Summary

## The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN (bsc#1179610 bsc#1215237). * CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559). * CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250). * CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947). * CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). * CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258). * CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253). The following non-security bugs were fixed: * clocksource: Avoid accidental unstable marking of clocksources (bsc#1218105). * clocksource: Suspend the watchdog temporarily when high read latency detected (bsc#1218105). * doc/README.SUSE: Add how to update the config for module signing (jsc#PED-5021) * doc/README.SUSE: Remove how to build modules using kernel-source (jsc#PED-5021) * doc/README.SUSE: Simplify the list of references (jsc#PED-5021). * efi/mokvar: Reserve the table only if it is in boot services data (bsc#1215375). * io_uring: fix 32-bit compatability with sendmsg/recvmsg (bsc#1217709).

References

* bsc#1179610

* bsc#1215237

* bsc#1215375

* bsc#1217250

* bsc#1217709

* bsc#1217946

* bsc#1217947

* bsc#1218105

* bsc#1218253

* bsc#1218258

* bsc#1218559

* jsc#PED-5021

Cross-

* CVE-2020-26555

* CVE-2023-51779

* CVE-2023-6121

* CVE-2023-6606

* CVE-2023-6610

* CVE-2023-6931

* CVE-2023-6932

CVSS scores:

* CVE-2020-26555 ( SUSE ): 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

* CVE-2020-26555 ( NVD ): 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

* CVE-2023-51779 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2023-6121 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

* CVE-2023-6121 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

* CVE-2023-6606 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

* CVE-2023-6606 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

* CVE-2023-6610 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

* CVE-2023-6610 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

* CVE-2023-6931 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2023-6931 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2023-6932 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2023-6932 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:

* openSUSE Leap 15.3

* SUSE Enterprise Storage 7.1

* SUSE Linux Enterprise High Availability Extension 15 SP3

* SUSE Linux Enterprise High Performance Computing 15 SP3

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3

* SUSE Linux Enterprise Live Patching 15-SP3

* SUSE Linux Enterprise Micro 5.1

* SUSE Linux Enterprise Micro 5.2

* SUSE Linux Enterprise Micro for Rancher 5.2

* SUSE Linux Enterprise Server 15 SP3

* SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3

* SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3

* SUSE Linux Enterprise Server for SAP Applications 15 SP3

* SUSE Manager Proxy 4.2

* SUSE Manager Retail Branch Server 4.2

* SUSE Manager Server 4.2

An update that solves seven vulnerabilities, contains one feature and has four

security fixes can now be installed.

##

* https://www.suse.com/security/cve/CVE-2020-26555.html

* https://www.suse.com/security/cve/CVE-2023-51779.html

* https://www.suse.com/security/cve/CVE-2023-6121.html

* https://www.suse.com/security/cve/CVE-2023-6606.html

* https://www.suse.com/security/cve/CVE-2023-6610.html

* https://www.suse.com/security/cve/CVE-2023-6931.html

* https://www.suse.com/security/cve/CVE-2023-6932.html

* https://bugzilla.suse.com/show_bug.cgi?id=1179610

* https://bugzilla.suse.com/show_bug.cgi?id=1215237

* https://bugzilla.suse.com/show_bug.cgi?id=1215375

* https://bugzilla.suse.com/show_bug.cgi?id=1217250

* https://bugzilla.suse.com/show_bug.cgi?id=1217709

* https://bugzilla.suse.com/show_bug.cgi?id=1217946

* https://bugzilla.suse.com/show_bug.cgi?id=1217947

* https://bugzilla.suse.com/show_bug.cgi?id=1218105

* https://bugzilla.suse.com/show_bug.cgi?id=1218253

* https://bugzilla.suse.com/show_bug.cgi?id=1218258

* https://bugzilla.suse.com/show_bug.cgi?id=1218559

* https://jira.suse.com/login.jsp

Severity
Announcement ID: SUSE-SU-2024:0153-1
Rating: important

Related News

News

Powered By

Footer Logo

Linux Security - Your source for Top Linux News, Advisories, HowTo's and Feature Release.

Powered By

Footer Logo