gpp_maybe
Security update for the linux kernel
SUSE-SLE-SAP-12-SP4-2023-852
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. (bsc#1205711) - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535). - CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2022-2991: Fixed an heap-based overflow in the lightnvm implemenation (bsc#1201420). The following non-security bugs were fixed: - kabi/severities: add l2tp local symbols
-
Release DateMar 21 2023
-
ReferencesBugzilla: 1209188, 1194535, 1201420, 1203331, 1203332, 1205711, 1207051, 1207773, 1207795, 1208700, 1191881
CVEs: CVE-2022-4129, CVE-2021-4203, CVE-2023-26545, CVE-2023-23559, CVE-2022-38096, CVE-2022-36280, CVE-2023-0045, CVE-2023-0590, CVE-2022-2991 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le
-
Packageskernel-default
The Standard Kernelkernel-default-base4.12.14-95.120.4 lock rpm lock nosrc
The Standard Kernel - base moduleskernel-default-devel4.12.14-95.120.4 lock rpm
Development files necessary for building kernel moduleskernel-devel4.12.14-95.120.4 lock rpm
Development files needed for building kernel moduleskernel-macros4.12.14-95.120.4 lock rpm
RPM macros for building Kernel Module Packageskernel-source4.12.14-95.120.4 lock rpm
The Linux Kernel Sourceskernel-syms4.12.14-95.120.4 lock rpm lock src
Kernel Symbol Versions (modversions)4.12.14-95.120.4 lock rpm lock src
SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64
-
Packageskernel-default
The Standard Kernelkernel-default-base4.12.14-95.120.4 lock rpm lock nosrc
The Standard Kernel - base moduleskernel-default-devel4.12.14-95.120.4 lock rpm
Development files necessary for building kernel moduleskernel-devel4.12.14-95.120.4 lock rpm
Development files needed for building kernel moduleskernel-macros4.12.14-95.120.4 lock rpm
RPM macros for building Kernel Module Packageskernel-source4.12.14-95.120.4 lock rpm
The Linux Kernel Sourceskernel-syms4.12.14-95.120.4 lock rpm lock src
Kernel Symbol Versions (modversions)4.12.14-95.120.4 lock rpm lock src