{"schema_version":"1.7.3","id":"SUSE-SU-2023:2147-1","published":"2023-05-09T15:04:16Z","modified":"2026-02-04T02:25:54.687934Z","related":["CVE-2020-36691","CVE-2022-2196","CVE-2023-1611","CVE-2023-1670","CVE-2023-1838","CVE-2023-1855","CVE-2023-1872","CVE-2023-1989","CVE-2023-1990","CVE-2023-1998","CVE-2023-2008","CVE-2023-2124","CVE-2023-2162","CVE-2023-2176","CVE-2023-30772"],"upstream":["CVE-2020-36691","CVE-2022-2196","CVE-2023-1611","CVE-2023-1670","CVE-2023-1838","CVE-2023-1855","CVE-2023-1872","CVE-2023-1989","CVE-2023-1990","CVE-2023-1998","CVE-2023-2008","CVE-2023-2124","CVE-2023-2162","CVE-2023-2176","CVE-2023-30772"],"summary":"Security update for the Linux Kernel","details":"The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498).\n- CVE-2023-1872:Fixed a use after free vulnerability in the io_uring subsystem, which could lead to local privilege escalation (bsc#1210414).\n- CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992).\n- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).\n- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647).\n- CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege (bsc#1210629).\n- CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).\n- CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).\n- CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453).\n- CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).\n- CVE-2020-36691: Fixed a denial of service vulnerability via a nested Netlink policy with a back reference (bsc#1209777).\n- CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).\n- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).\n- CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687).\n- CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203).\n\nThe following non-security bugs were fixed:\n\n- Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes).\n- cifs: fix negotiate context parsing (bsc#1210301).\n- keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).\n- vmxnet3: use gro callback when UPT is enabled (bsc#1209739).\n","affected":[{"package":{"name":"kernel-rt","ecosystem":"SUSE:Real Time Module 15 SP3","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.127.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"5.3.18-150300.127.1","dlm-kmp-rt":"5.3.18-150300.127.1","gfs2-kmp-rt":"5.3.18-150300.127.1","kernel-devel-rt":"5.3.18-150300.127.1","kernel-rt":"5.3.18-150300.127.1","kernel-rt-devel":"5.3.18-150300.127.1","kernel-rt_debug-devel":"5.3.18-150300.127.1","kernel-source-rt":"5.3.18-150300.127.1","kernel-syms-rt":"5.3.18-150300.127.1","ocfs2-kmp-rt":"5.3.18-150300.127.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2147-1.json"}},{"package":{"name":"kernel-rt_debug","ecosystem":"SUSE:Real Time Module 15 SP3","purl":"pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.127.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"5.3.18-150300.127.1","dlm-kmp-rt":"5.3.18-150300.127.1","gfs2-kmp-rt":"5.3.18-150300.127.1","kernel-devel-rt":"5.3.18-150300.127.1","kernel-rt":"5.3.18-150300.127.1","kernel-rt-devel":"5.3.18-150300.127.1","kernel-rt_debug-devel":"5.3.18-150300.127.1","kernel-source-rt":"5.3.18-150300.127.1","kernel-syms-rt":"5.3.18-150300.127.1","ocfs2-kmp-rt":"5.3.18-150300.127.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2147-1.json"}},{"package":{"name":"kernel-source-rt","ecosystem":"SUSE:Real Time Module 15 SP3","purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.127.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"5.3.18-150300.127.1","dlm-kmp-rt":"5.3.18-150300.127.1","gfs2-kmp-rt":"5.3.18-150300.127.1","kernel-devel-rt":"5.3.18-150300.127.1","kernel-rt":"5.3.18-150300.127.1","kernel-rt-devel":"5.3.18-150300.127.1","kernel-rt_debug-devel":"5.3.18-150300.127.1","kernel-source-rt":"5.3.18-150300.127.1","kernel-syms-rt":"5.3.18-150300.127.1","ocfs2-kmp-rt":"5.3.18-150300.127.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2147-1.json"}},{"package":{"name":"kernel-syms-rt","ecosystem":"SUSE:Real Time Module 15 SP3","purl":"pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.127.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"5.3.18-150300.127.1","dlm-kmp-rt":"5.3.18-150300.127.1","gfs2-kmp-rt":"5.3.18-150300.127.1","kernel-devel-rt":"5.3.18-150300.127.1","kernel-rt":"5.3.18-150300.127.1","kernel-rt-devel":"5.3.18-150300.127.1","kernel-rt_debug-devel":"5.3.18-150300.127.1","kernel-source-rt":"5.3.18-150300.127.1","kernel-syms-rt":"5.3.18-150300.127.1","ocfs2-kmp-rt":"5.3.18-150300.127.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2147-1.json"}},{"package":{"name":"kernel-rt","ecosystem":"SUSE:Linux Enterprise Micro 5.1","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.127.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt":"5.3.18-150300.127.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2147-1.json"}},{"package":{"name":"kernel-rt","ecosystem":"SUSE:Linux Enterprise Micro 5.2","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.127.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt":"5.3.18-150300.127.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2147-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232147-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1202353"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206992"},{"type":"REPORT","url":"https://bugzilla.suse.com/1207088"},{"type":"REPORT","url":"https://bugzilla.suse.com/1209687"},{"type":"REPORT","url":"https://bugzilla.suse.com/1209739"},{"type":"REPORT","url":"https://bugzilla.suse.com/1209777"},{"type":"REPORT","url":"https://bugzilla.suse.com/1209871"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210202"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210203"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210301"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210329"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210336"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210337"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210414"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210453"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210469"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210498"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210506"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210629"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210647"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-36691"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-2196"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1611"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1670"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1838"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1855"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1872"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1989"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1990"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1998"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2008"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2124"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2162"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2176"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-30772"}]}