[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2023:4028-1 -- SLES kernel

ID: oval:org.secpod.oval:def:89050942Date: (C)2023-11-16   (M)2024-04-29
Class: PATCHFamily: unix




The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity that could cause memory corruption . * CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation . * CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread . * CVE-2023-20588: Fixed a potential data leak that could be triggered through a side channel when division by zero occurred on some AMD processors . * CVE-2023-4459: Fixed a NULL pointer dereference flaw in the vmxnet3 driver that may have allowed a local attacker with user privileges to cause a denial of service . * CVE-2023-3772: Fixed a flaw in the XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to denial of service . * CVE-2023-2007: Removed the dpt_i2o driver due to security issues . * CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check . ## Special Instructions and Notes: * Please reboot the system after installing this update.

Platform:
SUSE Linux Enterprise Server 11 SP4
Product:
kernel
Reference:
SUSE-SU-2023:4028-1
CVE-2023-1077
CVE-2023-1192
CVE-2023-2007
CVE-2023-20588
CVE-2023-3772
CVE-2023-4385
CVE-2023-4459
CVE-2023-4623
CVE    8
CVE-2023-2007
CVE-2023-4385
CVE-2023-3772
CVE-2023-20588
...
CPE    3
cpe:/o:linux:linux_kernel
cpe:/o:linux:linux_kernel:-
cpe:/o:suse:suse_linux_enterprise_server:11:sp4

© SecPod Technologies