{"schema_version":"1.7.3","id":"SUSE-SU-2023:0767-1","published":"2023-03-16T12:17:04Z","modified":"2026-02-04T04:26:42.828692Z","related":["CVE-2022-36280","CVE-2022-38096","CVE-2023-0590","CVE-2023-23559","CVE-2023-26545"],"upstream":["CVE-2022-36280","CVE-2022-38096","CVE-2023-0590","CVE-2023-23559","CVE-2023-26545"],"summary":"Security update for the Linux Kernel","details":"\nThe SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700).\n- CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051).\n- CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). \n- CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332).\n- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).\n","affected":[{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.202.5"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.202.5","kernel-default-base":"4.4.121-92.202.5","kernel-default-devel":"4.4.121-92.202.5","kernel-devel":"4.4.121-92.202.6","kernel-macros":"4.4.121-92.202.6","kernel-source":"4.4.121-92.202.6","kernel-syms":"4.4.121-92.202.6"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0767-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.202.6"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.202.5","kernel-default-base":"4.4.121-92.202.5","kernel-default-devel":"4.4.121-92.202.5","kernel-devel":"4.4.121-92.202.6","kernel-macros":"4.4.121-92.202.6","kernel-source":"4.4.121-92.202.6","kernel-syms":"4.4.121-92.202.6"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0767-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.202.6"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.202.5","kernel-default-base":"4.4.121-92.202.5","kernel-default-devel":"4.4.121-92.202.5","kernel-devel":"4.4.121-92.202.6","kernel-macros":"4.4.121-92.202.6","kernel-source":"4.4.121-92.202.6","kernel-syms":"4.4.121-92.202.6"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0767-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230767-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203331"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203332"},{"type":"REPORT","url":"https://bugzilla.suse.com/1207051"},{"type":"REPORT","url":"https://bugzilla.suse.com/1207795"},{"type":"REPORT","url":"https://bugzilla.suse.com/1208700"},{"type":"REPORT","url":"https://bugzilla.suse.com/1209188"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-36280"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-38096"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-0590"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-23559"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-26545"}]}