{"schema_version":"1.7.3","id":"SUSE-SU-2023:0134-1","published":"2023-01-25T10:16:28Z","modified":"2026-02-04T02:54:44.362015Z","related":["CVE-2019-19083","CVE-2022-3105","CVE-2022-3106","CVE-2022-3107","CVE-2022-3108","CVE-2022-3111","CVE-2022-3435","CVE-2022-3643","CVE-2022-42328","CVE-2022-42329","CVE-2022-4662"],"upstream":["CVE-2019-19083","CVE-2022-3105","CVE-2022-3106","CVE-2022-3107","CVE-2022-3108","CVE-2022-3111","CVE-2022-3435","CVE-2022-3643","CVE-2022-42328","CVE-2022-42329","CVE-2022-4662"],"summary":"Security update for the Linux Kernel","details":"\nThe SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2022-3435: Fixed an out-of-bounds read in fib_nh_match() of the file net/ipv4/fib_semantics.c (bsc#1204171).\n- CVE-2022-4662: Fixed a recursive locking violation in usb-storage that can cause the kernel to deadlock. (bsc#1206664)\n- CVE-2022-3105: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc_array. (bsc#1206398)\n- CVE-2022-3108: Fixed a bug in kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c where a lack of check of the return value of kmemdup() could lead to a NULL pointer dereference. (bsc#1206389)\n- CVE-2022-3106: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc. (bsc#1206397)\n- CVE-2022-3107: Fixed a null pointer dereference caused by a missing check of the return value of kvmalloc_array. (bsc#1206395)\n- CVE-2022-3111: Fixed a missing release of resource after effective lifetime bug caused by a missing free of the WM8350_IRQ_CHG_FAST_RDY in wm8350_init_charger. (bsc#1206394)\n- CVE-2022-42328: Fixed a bug which could allow guests to trigger denial of service via the netback driver (bsc#1206114).\n- CVE-2022-42329: Fixed a bug which could allow guests to trigger denial of service via the netback driver (bsc#1206113).\n- CVE-2022-3643: Fixed a bug which could allow guests to trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).\n- CVE-2019-19083: Fixed a memory leaks in clock_source_create that could allow attackers to cause a denial of service (bsc#1157049).\n\nThe following non-security bugs were fixed:\n\n- afs: Fix some tracing details (git-fixes).\n- block: Do not reread partition table on exclusively open device (bsc#1190969).\n- cuse: prevent clone (bsc#1206177).\n- dt-bindings: clocks: imx8mp: Add ID for usb suspend clock (git-fixes).\n- efi: Add iMac Pro 2017 to uefi skip cert quirk (git-fixes).\n- fuse: do not check refcount after stealing page (bsc#1206174).\n- fuse: fix the ->direct_IO() treatment of iov_iter (bsc#1206176).\n- fuse: fix use after free in fuse_read_interrupt() (bsc#1206178).\n- fuse: lock inode unconditionally in fuse_fallocate() (bsc#1206179).\n- fuse: update attr_version counter on fuse_notify_inval_inode() (bsc#1206175).\n- ipv6: ping: fix wrong checksum for large frames (bsc#1203183).\n- kbuild: Unify options for BTF generation for vmlinux and modules (bsc#1204693).\n- mm, page_alloc: avoid expensive reclaim when compaction may not succeed (bsc#1204250).\n- net: mana: Fix race on per-CQ variable napi work_done (git-fixes).\n- net: usb: cdc_ncm: do not spew notifications (git-fixes).\n- net: usb: qmi_wwan: add u-blox 0x1342 composition (git-fixes).\n- rtc: pcf85063: Fix reading alarm (git-fixes).\n- s390/boot: add secure boot trailer (bsc#1205256 LTC#1205256).\n- tracing: Add tracing_reset_all_online_cpus_unlocked() function (git-fixes).\n- tracing: Delete all matched events (git-fixes).\n- tracing: Free buffers when a used dynamic event is removed (git-fixes).\n- usb: host: xhci-hub: fix extra endianness conversion (git-fixes).\n- usbnet: move new members to end (git-fixes).\n","affected":[{"package":{"name":"kernel-rt","ecosystem":"SUSE:Real Time Module 15 SP3","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.115.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"5.3.18-150300.115.1","dlm-kmp-rt":"5.3.18-150300.115.1","gfs2-kmp-rt":"5.3.18-150300.115.1","kernel-devel-rt":"5.3.18-150300.115.1","kernel-rt":"5.3.18-150300.115.1","kernel-rt-devel":"5.3.18-150300.115.1","kernel-rt_debug-devel":"5.3.18-150300.115.1","kernel-source-rt":"5.3.18-150300.115.1","kernel-syms-rt":"5.3.18-150300.115.1","ocfs2-kmp-rt":"5.3.18-150300.115.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0134-1.json"}},{"package":{"name":"kernel-rt_debug","ecosystem":"SUSE:Real Time Module 15 SP3","purl":"pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.115.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"5.3.18-150300.115.1","dlm-kmp-rt":"5.3.18-150300.115.1","gfs2-kmp-rt":"5.3.18-150300.115.1","kernel-devel-rt":"5.3.18-150300.115.1","kernel-rt":"5.3.18-150300.115.1","kernel-rt-devel":"5.3.18-150300.115.1","kernel-rt_debug-devel":"5.3.18-150300.115.1","kernel-source-rt":"5.3.18-150300.115.1","kernel-syms-rt":"5.3.18-150300.115.1","ocfs2-kmp-rt":"5.3.18-150300.115.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0134-1.json"}},{"package":{"name":"kernel-source-rt","ecosystem":"SUSE:Real Time Module 15 SP3","purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.115.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"5.3.18-150300.115.1","dlm-kmp-rt":"5.3.18-150300.115.1","gfs2-kmp-rt":"5.3.18-150300.115.1","kernel-devel-rt":"5.3.18-150300.115.1","kernel-rt":"5.3.18-150300.115.1","kernel-rt-devel":"5.3.18-150300.115.1","kernel-rt_debug-devel":"5.3.18-150300.115.1","kernel-source-rt":"5.3.18-150300.115.1","kernel-syms-rt":"5.3.18-150300.115.1","ocfs2-kmp-rt":"5.3.18-150300.115.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0134-1.json"}},{"package":{"name":"kernel-syms-rt","ecosystem":"SUSE:Real Time Module 15 SP3","purl":"pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.115.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"5.3.18-150300.115.1","dlm-kmp-rt":"5.3.18-150300.115.1","gfs2-kmp-rt":"5.3.18-150300.115.1","kernel-devel-rt":"5.3.18-150300.115.1","kernel-rt":"5.3.18-150300.115.1","kernel-rt-devel":"5.3.18-150300.115.1","kernel-rt_debug-devel":"5.3.18-150300.115.1","kernel-source-rt":"5.3.18-150300.115.1","kernel-syms-rt":"5.3.18-150300.115.1","ocfs2-kmp-rt":"5.3.18-150300.115.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0134-1.json"}},{"package":{"name":"kernel-rt","ecosystem":"SUSE:Linux Enterprise Micro 5.1","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.115.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt":"5.3.18-150300.115.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0134-1.json"}},{"package":{"name":"kernel-rt","ecosystem":"SUSE:Linux Enterprise Micro 5.2","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.115.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt":"5.3.18-150300.115.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0134-1.json"}},{"package":{"name":"kernel-rt","ecosystem":"openSUSE:Leap Micro 5.2","purl":"pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%20Micro%205.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.115.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt":"5.3.18-150300.115.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0134-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230134-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1151927"},{"type":"REPORT","url":"https://bugzilla.suse.com/1157049"},{"type":"REPORT","url":"https://bugzilla.suse.com/1190969"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203183"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204171"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204250"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204693"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205256"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206113"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206114"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206174"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206175"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206176"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206177"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206178"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206179"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206389"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206394"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206395"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206397"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206398"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206664"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19083"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3105"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3106"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3107"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3108"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3111"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3435"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3643"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-42328"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-42329"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-4662"}]}