🛡️ SUSE-SU-2023:3006-1 — kernel-rt (CVE-2023-20593 +2 more)

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
• CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
• CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).

The following non-security bugs were fixed:

• Get module prefix from kmod (bsc#1212835).
• USB: add NO_LPM quirk for Realforce 87U Keyboard (git-fixes).
• USB: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes).
• USB: core: hub: Disable autosuspend for Cypress CY7C65632 (git-fixes).
• USB: hcd-pci: Fully suspend across freeze/thaw cycle (git-fixes).
• USB: hub: Add delay for SuperSpeed hub resume to let links transit to U0 (git-fixes).
• USB: serial: option: add Fibocom FM160 0x0111 composition (git-fixes).
• USB: serial: option: add Quectel EM05-G (GR) modem (git-fixes).
• USB: serial: option: add Quectel EM05-G (RS) modem (git-fixes).
• USB: serial: option: add Sierra Wireless EM9191 (git-fixes).
• USB: serial: option: add u-blox LARA-R6 00B modem (git-fixes).
• blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership arbitration (bsc#1213022).
• btrfs: fix resolving backrefs for inline extent followed by prealloc (bsc#1213133).
• dlm: Delete an unnecessary variable initialisation in dlm_ls_start() (git-fixes).
• dlm: NULL check before kmem_cache_destroy is not needed (git-fixes).
• dlm: fix invalid cluster name warning (git-fixes).
• dlm: fix missing idr_destroy for recover_idr (git-fixes).
• dlm: fix missing lkb refcount handling (git-fixes).
• dlm: fix plock invalid read (git-fixes).
• dlm: fix possible call to kfree() for non-initialized pointer (git-fixes).
• ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020).
• ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617).
• ext4: avoid BUG_ON when creating xattrs (bsc#1205496).
• ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634).
• ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018).
• ext4: fail ext4_iget if special inode unallocated (bsc#1213010).
• ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766).
• ext4: fix WARNING in ext4_update_inline_data (bsc#1213012).
• ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620).
• ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765).
• ext4: fix deadlock due to mbcache entry corruption (bsc#1207653).
• ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630).
• ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015).
• ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021).
• ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017).
• ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629).
• ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633).
• ext4: move where set the MAY_INLINE_DATA flag is set (bsc#1213011).
• ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019).
• ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013).
• fs: dlm: cancel work sync othercon (git-fixes).
• fs: dlm: filter user dlm messages for kernel locks (git-fixes).
• fs: dlm: fix configfs memory leak (git-fixes).
• fs: dlm: fix debugfs dump (git-fixes).
• fs: dlm: fix memory leak when fenced (git-fixes).
• fs: dlm: fix race between test_bit() and queue_work() (git-fixes).
• fs: dlm: handle -EBUSY first in lock arg validation (git-fixes).
• fs: fix guard_bio_eod to check for real EOD errors (bsc#1213042).
• fs: prevent BUG_ON in submit_bh_wbc() (bsc#1212990).
• fuse: revalidate: do not invalidate if interrupted (bsc#1213525).
• igb: revert rtnl_lock() that causes deadlock (git-fixes).
• include/trace/events/writeback.h: fix -Wstringop-truncation warnings (bsc#1213023).
• inotify: Avoid reporting event with invalid wd (bsc#1213025).
• jbd2: Fix statistics for the number of logged blocks (bsc#1212988).
• jbd2: abort journal if free a async write error metadata buffer (bsc#1212989).
• jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted (bsc#1202716).
• jbd2: fix data races at struct journal_head (bsc#1173438).
• jbd2: fix invalid descriptor block checksum (bsc#1212987).
• jbd2: fix race when writing superblock (bsc#1212986).
• jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014).
• kernel-docs: Add buildrequires on python3-base when using python3 The python