[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2024:0120-1 -- SLES kernel, reiserfs-kmp-default

ID: oval:org.secpod.oval:def:89051368Date: (C)2024-01-23   (M)2024-04-29
Class: PATCHFamily: unix




The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN . * CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted . * CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg . * CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak . * CVE-2023-6606: Fixed an out-of-bounds read vulnerability in smbCalcSize in fs/smb/client/netmisc.c that could allow a local attacker to crash the system or leak internal kernel information . * CVE-2023-6610: Fixed an out-of-bounds read vulnerability in smb2_dump_detail in fs/smb/client/smb2ops.c that could allow a local attacker to crash the system or leak internal kernel information . * CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel"s Performance Events system component that could lead to local privilege escalation. * CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel"s ipv4: igmp component that could lead to local privilege escalation . The following non-security bugs were fixed: * doc/README.SUSE: Add how to update the config for module signing * doc/README.SUSE: Remove how to build modules using kernel-source * doc/README.SUSE: Simplify the list of references ## Special Instructions and Notes: * Please reboot the system after installing this update.

Platform:
SUSE Linux Enterprise Server 15 SP1
Product:
kernel
reiserfs-kmp-default
Reference:
SUSE-SU-2024:0120-1
CVE-2020-26555
CVE-2022-2586
CVE-2023-51779
CVE-2023-6121
CVE-2023-6606
CVE-2023-6610
CVE-2023-6931
CVE-2023-6932
CVE    8
CVE-2023-6932
CVE-2023-6931
CVE-2020-26555
CVE-2022-2586
...
CPE    3
cpe:/o:linux:linux_kernel
cpe:/o:suse:suse_linux_enterprise_server:15:sp1
cpe:/a:kmp:reiserfs_kmp_default

© SecPod Technologies