gpp_maybe
Security update for the linux kernel
SUSE-SLE-RT-12-SP5-2024-118
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks (bsc#1179610 bsc#1215237). - CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bsc#1202095). - CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250). - CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947). - CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). - CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218258). - CVE-2023-6932: Fixed a use-after-free issue when receiving an IGMP query packet due to reference count mismanagement (bsc#1218253). - CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559). The following non-security bugs were fixed: - Enabled the LLC counters for “perf” (perf stat) on the Ice-Lake and Rocket-Lake CPUs (jsc#PED-5023 bsc#1211439). - Reviewed and added more information to README.SUSE (jsc#PED-5021). - Enabled multibuild for kernel packages (JSC-SLE#5501, boo#1211226, bsc#1218184). - Fix termination state for idr_for_each_entry_ul() (bsc#1109837). - KVM: s390/mm: Properly reset no-dat (bsc#1218057). - KVM: s390: vsie: fix wrong VIR 37 when MSO is used (bsc#1217936). - PCI: Disable ATS for specific Intel IPU E2000 devices (bsc#1218622). - Previous perf cve-4.12->SLE12-SP5 manual merge was incorrect. Fix. - gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479). - gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479). - gve: Changes to add new TX queues (bsc#1214479). - gve: Control path for DQO-QPL (bsc#1214479). - gve: Do not fully free QPL pages on prefill errors (bsc#1214479). - gve: Fix gve interrupt names (bsc#1214479). - gve: Fixes for napi_poll when budget is 0 (bsc#1214479). - gve: RX path for DQO-QPL (bsc#1214479). - gve: Set default duplex configuration to full (bsc#1214479). - gve: Tx path for DQO-QPL (bsc#1214479). - gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479). - gve: XDP support GQI-QPL: helper function changes (bsc#1214479). - gve: fix frag_list chaining (bsc#1214479). - gve: trivial spell fix Recive to Receive (bsc#1214479). - gve: unify driver name usage (bsc#1214479). - net/tg3: fix race condition in tg3_reset_task() (bsc#1217801). - net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1217801). - s390/vx: fix save/restore of fpu kernel context (bsc#1218362). - tracing: Fix a possible race when disabling buffered events (bsc#1217036). - tracing: Fix a warning when allocating buffered events fails (bsc#1217036). - tracing: Fix incomplete locking when disabling buffered events (bsc#1217036). - tracing: Fix warning in trace_buffered_event_disable() (bsc#1217036).
-
Release DateJan 16 2024
-
ReferencesBugzilla: 1109837, 1179610, 1202095, 1211226, 1211439, 1214479, 1215237, 1217036, 1217250, 1217801, 1217936, 1217946, 1217947, 1218057, 1218184, 1218253, 1218258, 1218362, 1218559, 1218622
CVEs: CVE-2023-6610, CVE-2022-2586, CVE-2023-51779, CVE-2020-26555, CVE-2023-6931, CVE-2023-6606, CVE-2023-6932, CVE-2023-6121 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Real Time 12.5 x86_64
-
Packagescluster-md-kmp-rt
Clustering support for MD devicesdlm-kmp-rt4.12.14-10.157.1 lock rpm
DLM kernel modulesgfs2-kmp-rt4.12.14-10.157.1 lock rpm
GFS2 kernel moduleskernel-devel-rt4.12.14-10.157.1 lock rpm
Development files needed for building kernel moduleskernel-rt4.12.14-10.157.1 lock rpm
The Realtime Linux Kernelkernel-rt-base4.12.14-10.157.1 lock rpm lock nosrc
The Realtime Linux Kernel - base moduleskernel-rt-devel4.12.14-10.157.1 lock rpm
Development files necessary for building kernel moduleskernel-rt_debug4.12.14-10.157.1 lock rpm
A Debug Version of the Realtime Kernelkernel-rt_debug-devel4.12.14-10.157.1 lock rpm lock nosrc
Development files necessary for building kernel moduleskernel-source-rt4.12.14-10.157.1 lock rpm
The Linux Kernel Sourceskernel-syms-rt4.12.14-10.157.1 lock rpm lock src
Kernel Symbol Versions (modversions)ocfs2-kmp-rt4.12.14-10.157.1 lock rpm lock src
OCFS2 kernel modules4.12.14-10.157.1 lock rpm