{"id":"SUSE-SU-2023:4358-1","summary":"Security update for the Linux Kernel","details":"\nThe SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215518)\n- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215095)\n- CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745).\n- CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. (bsc#1216046)\n- CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).\n- CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861).\n- CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860).\n- CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858).\n- CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467).\n\nThe following non-security bugs were fixed:\n\n- nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() (bsc#1214842).\n","modified":"2026-03-11T07:25:10.890881Z","published":"2023-11-03T12:46:24Z","related":["CVE-2023-2163","CVE-2023-3111","CVE-2023-34324","CVE-2023-3777","CVE-2023-39189","CVE-2023-39192","CVE-2023-39193","CVE-2023-39194","CVE-2023-42754"],"upstream":["CVE-2023-2163","CVE-2023-3111","CVE-2023-34324","CVE-2023-3777","CVE-2023-39189","CVE-2023-39192","CVE-2023-39193","CVE-2023-39194","CVE-2023-42754"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234358-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212051"},{"type":"REPORT","url":"https://bugzilla.suse.com/1214842"},{"type":"REPORT","url":"https://bugzilla.suse.com/1215095"},{"type":"REPORT","url":"https://bugzilla.suse.com/1215467"},{"type":"REPORT","url":"https://bugzilla.suse.com/1215518"},{"type":"REPORT","url":"https://bugzilla.suse.com/1215745"},{"type":"REPORT","url":"https://bugzilla.suse.com/1215858"},{"type":"REPORT","url":"https://bugzilla.suse.com/1215860"},{"type":"REPORT","url":"https://bugzilla.suse.com/1215861"},{"type":"REPORT","url":"https://bugzilla.suse.com/1216046"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-2163"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3111"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-34324"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3777"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-39189"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-39192"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-39193"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-39194"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-42754"}],"affected":[{"package":{"name":"kernel-rt","ecosystem":"SUSE:Linux Enterprise Micro 5.1","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.149.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt":"5.3.18-150300.149.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:4358-1.json"}},{"package":{"name":"kernel-rt","ecosystem":"SUSE:Linux Enterprise Micro 5.2","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.149.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt":"5.3.18-150300.149.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:4358-1.json"}}],"schema_version":"1.7.5"}