🛡️ SUSE-SU-2023:4072-2 — dtb-aarch64 (CVE-2023-4563 +16 more)

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2023-4563: Fixed an use-after-free flaw in the nftables sub-component. This vulnerability could allow a local attacker to crash the system or lead to a kernel information leak problem. (bsc#1214727)
• CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215861)
• CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215860)
• CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to disclose sensitive information. (bsc#1215858)
• CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated attacker to trigger a DoS. (bsc#1215467)
• CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899)
• CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022)
• CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351).
• CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
• CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703).
• CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275).
• CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117).
• CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115).
• CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169).
• CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
• CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643).
• CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).

The following non-security bugs were fixed:

• ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes).
• ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes).
• ARM: pxa: remove use of symbol_get() (git-fixes).
• arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes).
• arm64: module-plts: inline linux/moduleloader.h (git-fixes)
• arm64: module: Use module_init_layout_section() to spot init sections (git-fixes)
• arm64: sdei: abort running SDEI handlers during crash (git-fixes)
• arm64: tegra: Update AHUB clock parent and rate (git-fixes)
• arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes)
• ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes).
• ASoC: meson: spdifin: start hw on dai probe (git-fixes).
• ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes).
• ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes).
• ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes).
• ata: pata_falcon: fix IO base selection for Q40 (git-fixes).
• ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes).
• ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes).
• backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes).
• blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986).
• blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992).
• block/mq-deadline: use correct way to throttling write requests (bsc#1214993).
• Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes).
• bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322).
• bpf: Clear the probe_addr for uprobe (git-fixes).
• btrfs: do not hold CPU for too long when defragging a file (bsc#1214988).
• drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes).
• drm/amd/disp