kernel: Fix of 7 CVEs

mISDN: fix use-after-free bugs in l1oip timer handlers CVE-2022-3565 - media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - Bluetooth: btsdio: fix use after free bug in btsdioremove due to unfinished work CVE-2023-1989 - proc: procskipspaces shouldn't think it is working on C...

SUSE SLES15 Security Update : kernel (Live Patch 10 for SLE 15 SP4) (SUSE-SU-2023:2032-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:2032-1 advisory. This update for the Linux Kernel 5.14.21-1504002455 fixes one issue. The following security issue was fixed: - CVE-2023-1652: Fixed use-after-free that...

SUSE SLES15 Security Update : kernel (Live Patch 6 for SLE 15 SP4) (SUSE-SU-2023:2031-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2031-1 advisory. This update for the Linux Kernel 5.14.21-1504002438 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race...

SUSE-SU-2023:2032-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504002455 fixes one issue. The following security issue was fixed: - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4sscsetupdul in fs/nfsd/nfs4proc.c bsc1209788...

SUSE-SU-2023:2031-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504002438 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race condition in qdiscgraft bsc1207795. - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4sscsetupdul in...

SUSE SLES15 Security Update : kernel RT (Live Patch 5 for SLE 15 SP4) (SUSE-SU-2023:1978-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:1978-1 advisory. This update for the Linux Kernel 5.14.21-1504001518 fixes one issue. The following security issue was fixed: - CVE-2023-1652: Fixed use-after-free that...

SUSE SLES15 Security Update : kernel RT (Live Patch 3 for SLE 15 SP4) (SUSE-SU-2023:1977-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1977-1 advisory. This update for the Linux Kernel 5.14.21-1504001511 fixes several issues. The following security issues were fixed: - CVE-2023-1652: Fixed...

USN-6040-1: Linux kernel (HWE) vulnerabilities

It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-1281 It was discovered that the OverlayFS...

SUSE-SU-2023:1978-1 Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504001518 fixes one issue. The following security issue was fixed: - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4sscsetupdul in fs/nfsd/nfs4proc.c bsc1209788...

SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2023:1802-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1802-1 advisory. The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following...

AZL-25962 CVE-2023-1652 affecting package kernel for versions less than 5.15.107.1-2

A use-after-free flaw was found in nfsd4sscsetupdul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem...

CVE-2023-1652

A use-after-free flaw was found in nfsd4sscsetupdul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem...

DEBIAN-CVE-2023-1652

A use-after-free flaw was found in nfsd4sscsetupdul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem...

CVE-2023-1652

A use-after-free flaw was found in nfsd4sscsetupdul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem...

CVE-2023-1652

CVE-2023-1652 refers to a use-after-free in nfsd4_ssc_setup_dul (fs/nfsd/nfs4proc.c) of the Linux kernel’s NFS subsystem that can let a local attacker crash the system or leak kernel information. Connected advisories confirm the issue exists in the Linux kernel and indicate remediation via kernel...

CVE-2023-1652

A use-after-free flaw was found in nfsd4sscsetupdul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem. Mitigation Mitigation for this issue is either not available or the...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2023-014)

The version of kernel installed on the remote host is prior to 5.15.93-55.139. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2023-014 advisory. 2023-11-09: CVE-2023-3567 was added to this advisory. A flaw was found in the Linux kernel's Layer 2...

SUSE SLES15: kernel-livepatch-4_12_14-150_78-default / etc (SUSE-SU-2022:3409-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3409-1 advisory. This update for the Linux Kernel 4.12.14-15078 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a race...

Amazon Linux AMI : python36 (ALAS-2022-1652)

The version of python36 installed on the remote host is prior to 3.6.12-1.23. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1652 advisory. The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows...

SUSE SLES15: kernel-livepatch-5_3_18-150200_24_112-default / etc (SUSE-SU-2022:3476-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3476-1 advisory. This update for the Linux Kernel 5.3.18-15020024112 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a...