{"schema_version":"1.7.3","id":"SUSE-SU-2023:2810-1","published":"2023-07-12T09:34:43Z","modified":"2026-02-04T03:51:16.266764Z","related":["CVE-2023-1077","CVE-2023-1249","CVE-2023-2002","CVE-2023-3090","CVE-2023-3141","CVE-2023-3159","CVE-2023-3161","CVE-2023-3268","CVE-2023-3358","CVE-2023-35788","CVE-2023-35823","CVE-2023-35824","CVE-2023-35828"],"upstream":["CVE-2023-1077","CVE-2023-1249","CVE-2023-2002","CVE-2023-3090","CVE-2023-3141","CVE-2023-3159","CVE-2023-3161","CVE-2023-3268","CVE-2023-3358","CVE-2023-35788","CVE-2023-35823","CVE-2023-35824","CVE-2023-35828"],"summary":"Security update for the Linux Kernel","details":"\nThe SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).\n- CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).\n- CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513).\n- CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).\n- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).\n- CVE-2023-3268: Fixed an out of bounds (OOB) memory access flaw in relay_file_read_start_pos in kernel/relay.c (bsc#1212502).\n- CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).\n- CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494).\n- CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504).\n- CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).\n- CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).\n- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).\n- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).\n\nThe following non-security bugs were fixed:\n\n- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).\n- Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes).\n- Drop dvb-core fix patch due to bug (bsc#1205758).\n- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).\n- Fix usrmerge error (boo#1211796)\n- Remove obsolete KMP obsoletes (bsc#1210469).\n- Replace mkinitrd dependency with dracut (bsc#1202353). Also update mkinitrd refrences in documentation and comments.\n- cifs: do not include page data when checking signature (bsc#1200217).\n- cifs: fix negotiate context parsing (bsc#1210301).\n- cifs: fix open leaks in open_cached_dir() (bsc#1209342).\n- google/gve:fix repeated words in comments (bsc#1211519).\n- gve: Adding a new AdminQ command to verify driver (bsc#1211519).\n- gve: Cache link_speed value from device (bsc#1211519).\n- gve: Fix GFP flags when allocing pages (bsc#1211519).\n- gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).\n- gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519).\n- gve: Handle alternate miss completions (bsc#1211519).\n- gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).\n- gve: Remove the code of clearing PBA bit (bsc#1211519).\n- gve: Secure enough bytes in the first TX desc for all TCP pkts (bsc#1211519).\n- gve: enhance no queue page list detection (bsc#1211519).\n- ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).\n- k-m-s: Drop Linux 2.6 support\n- kernel-binary: install expoline.o (boo#1210791 bsc#1211089)\n- keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).\n- rpm/kernel-binary.spec.in: Add Provides of kernel-preempt (jsc#SLE-18857) For smooth migration with the former kernel-preempt user, kernel-default provides kernel-preempt now when CONFIG_PREEMPT_DYNAMIC is defined.\n- rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm\n- rpm/kernel-binary.spec.in: Fix missing kernel-preempt-devel and KMP Provides (bsc#1199046)\n- rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)\n- s390,dcssblk,dax: Add dax zero_page_range operation to dcssblk driver (bsc#1199636).\n- sunrpc: Ensure the transport backchannel association (bsc#1211203).\n- usrmerge: Compatibility with earlier rpm (boo#1211796)\n- vmxnet3: use gro callback when UPT is enabled (bsc#1209739).\n- x86/build: Avoid relocation information in final vmlinux (bsc#1187829).\n","affected":[{"package":{"name":"kernel-rt","ecosystem":"SUSE:Real Time Module 15 SP3","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.135.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"5.3.18-150300.135.1","dlm-kmp-rt":"5.3.18-150300.135.1","gfs2-kmp-rt":"5.3.18-150300.135.1","kernel-devel-rt":"5.3.18-150300.135.1","kernel-rt":"5.3.18-150300.135.1","kernel-rt-devel":"5.3.18-150300.135.1","kernel-rt_debug-devel":"5.3.18-150300.135.1","kernel-source-rt":"5.3.18-150300.135.1","kernel-syms-rt":"5.3.18-150300.135.1","ocfs2-kmp-rt":"5.3.18-150300.135.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2810-1.json"}},{"package":{"name":"kernel-rt_debug","ecosystem":"SUSE:Real Time Module 15 SP3","purl":"pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.135.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"5.3.18-150300.135.1","dlm-kmp-rt":"5.3.18-150300.135.1","gfs2-kmp-rt":"5.3.18-150300.135.1","kernel-devel-rt":"5.3.18-150300.135.1","kernel-rt":"5.3.18-150300.135.1","kernel-rt-devel":"5.3.18-150300.135.1","kernel-rt_debug-devel":"5.3.18-150300.135.1","kernel-source-rt":"5.3.18-150300.135.1","kernel-syms-rt":"5.3.18-150300.135.1","ocfs2-kmp-rt":"5.3.18-150300.135.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2810-1.json"}},{"package":{"name":"kernel-source-rt","ecosystem":"SUSE:Real Time Module 15 SP3","purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.135.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"5.3.18-150300.135.1","dlm-kmp-rt":"5.3.18-150300.135.1","gfs2-kmp-rt":"5.3.18-150300.135.1","kernel-devel-rt":"5.3.18-150300.135.1","kernel-rt":"5.3.18-150300.135.1","kernel-rt-devel":"5.3.18-150300.135.1","kernel-rt_debug-devel":"5.3.18-150300.135.1","kernel-source-rt":"5.3.18-150300.135.1","kernel-syms-rt":"5.3.18-150300.135.1","ocfs2-kmp-rt":"5.3.18-150300.135.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2810-1.json"}},{"package":{"name":"kernel-syms-rt","ecosystem":"SUSE:Real Time Module 15 SP3","purl":"pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.135.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"5.3.18-150300.135.1","dlm-kmp-rt":"5.3.18-150300.135.1","gfs2-kmp-rt":"5.3.18-150300.135.1","kernel-devel-rt":"5.3.18-150300.135.1","kernel-rt":"5.3.18-150300.135.1","kernel-rt-devel":"5.3.18-150300.135.1","kernel-rt_debug-devel":"5.3.18-150300.135.1","kernel-source-rt":"5.3.18-150300.135.1","kernel-syms-rt":"5.3.18-150300.135.1","ocfs2-kmp-rt":"5.3.18-150300.135.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2810-1.json"}},{"package":{"name":"kernel-rt","ecosystem":"SUSE:Linux Enterprise Micro 5.1","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.135.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt":"5.3.18-150300.135.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2810-1.json"}},{"package":{"name":"kernel-rt","ecosystem":"SUSE:Linux Enterprise Micro 5.2","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.135.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt":"5.3.18-150300.135.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2810-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232810-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1160435"},{"type":"REPORT","url":"https://bugzilla.suse.com/1172073"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187829"},{"type":"REPORT","url":"https://bugzilla.suse.com/1191731"},{"type":"REPORT","url":"https://bugzilla.suse.com/1199046"},{"type":"REPORT","url":"https://bugzilla.suse.com/1199636"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200217"},{"type":"REPORT","url":"https://bugzilla.suse.com/1202353"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205758"},{"type":"REPORT","url":"https://bugzilla.suse.com/1207088"},{"type":"REPORT","url":"https://bugzilla.suse.com/1208600"},{"type":"REPORT","url":"https://bugzilla.suse.com/1209039"},{"type":"REPORT","url":"https://bugzilla.suse.com/1209342"},{"type":"REPORT","url":"https://bugzilla.suse.com/1209739"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210301"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210469"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210533"},{"type":"REPORT","url":"https://bugzilla.suse.com/1210791"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211089"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211203"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211519"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211592"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211622"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211796"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212128"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212129"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212154"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212158"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212494"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212501"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212502"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212504"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212513"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212606"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212842"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1077"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1249"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2002"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3090"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3141"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3159"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3161"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3268"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3358"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-35788"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-35823"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-35824"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-35828"}]}