SUSE-SU-2023:3376-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2023/suse-su-20233376-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3376-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2023:3376-1

Related

Published

2023-08-22T15:04:29Z

Modified

2023-08-22T15:04:29Z

Summary

Security update for the Linux Kernel

Details

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
CVE-2023-3268: Fixed an out of bounds memory access flaw in relayfilereadstartpos in the relayfs (bsc#1212502).
CVE-2023-2166: Fixed NULL pointer dereference in canrcvfilter (bsc#1210627).
CVE-2023-0459: Fixed information leak in _uaccessbegin_nospec (bsc#1211738).
CVE-2023-4004: Fixed improper element removal netfilter nftsetpipapo (bsc#1213812).
CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272).
CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).
CVE-2023-3863: Fixed a use-after-free flaw in nfcllcpfindlocal in net/nfc/llcpcore.c in NFC. This flaw allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
CVE-2023-3567: Fixed a use-after-free in vcsread in drivers/tty/vt/vcscreen.c (bsc#1213167).
CVE-2023-31083: Fixed race condition in hciuarttty_ioctl (bsc#1210780).
CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586).
CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
CVE-2023-38409: Fixed an issue in setcon2fbmap in drivers/video/fbdev/core/fbcon.c. Because an assignment occurs only for the first vc, the fbconregisteredfb and fbcondisplay arrays can be desynchronized in fbconmodedeleted (the con2fbmap points at the old fb_info) (bsc#1213417).
CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).

The following non-security bugs were fixed:

ACPI: CPPC: Add ACPI disabled check to acpicpcvalid() (bsc#1212445).
ACPI: CPPC: Add definition for undefined FADT preferred PM profile value (bsc#1212445).
ACPI: utils: Fix acpievaluatedsm_typed() redefinition error (git-fixes).
ACPI/IORT: Remove erroneous idcount check in iortnodegetrmr_info() (git-fixes).
afs: Adjust ACK interpretation to try and cope with NAT (git-fixes).
afs: Fix access after dec in put functions (git-fixes).
afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes).
afs: Fix dynamic root getattr (git-fixes).
afs: Fix fileserver probe RTT handling (git-fixes).
afs: Fix infinite loop found by xfstest generic/676 (git-fixes).
afs: Fix lost servers_outstanding count (git-fixes).
afs: Fix server->active leak in afsputserver (git-fixes).
afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes).
afs: Fix updating of i_size with dv jump from server (git-fixes).
afs: Fix vlserver probe RTT handling (git-fixes).
afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes).
afs: Use refcountt rather than atomict (git-fixes).
afs: Use the operation issue time instead of the reply time for callbacks (git-fixes).
ALSA: emu10k1: roll up loops in DSP setup code for Audigy (git-fixes).
ALSA: hda/realtek - remove 3k pull low procedure (git-fixes).
ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).
ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes).
ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes).
ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes).
ALSA: hda/realtek: Support ASUS G713PV laptop (git-fixes).
ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (git-fixes).
ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless (git-fixes).
ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless (git-fixes).
ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset (bsc#1207129).
ALSA: usb-audio: Add quirk for Tascam Model 12 (git-fixes).
ALSA: usb-audio: Always initialize fixedrate in sndusbfindimplicitfbsync_format() (git-fixes).
ALSA: usb-audio: Apply mutex around sndusbendpointsetparams() (git-fixes).
ALSA: usb-audio: Avoid superfluous endpoint setup (git-fixes).
ALSA: usb-audio: Avoid unnecessary interface change at EP close (git-fixes).
ALSA: usb-audio: Clear fixed clock rate at closing EP (git-fixes).
ALSA: usb-audio: Correct the return code from sndusbendpointsetparams() (git-fixes).
ALSA: usb-audio: Drop superfluous interface setup at parsing (git-fixes).
ALSA: usb-audio: Fix possible NULL pointer dereference in sndusbpcmhasfixed_rate() (git-fixes).
ALSA: usb-audio: Fix wrong kfree issue in sndusbendpointfreeall (git-fixes).
ALSA: usb-audio: More refactoring of hw constraint rules (git-fixes).
ALSA: usb-audio: Properly refcounting clock rate (git-fixes).
ALSA: usb-audio: Rate limit usbsetinterface error reporting (git-fixes).
ALSA: usb-audio: Refcount multiple accesses on the single clock (git-fixes).
ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2) (git-fixes).
ALSA: usb-audio: Update for native DSD support quirks (git-fixes).
ALSA: usb-audio: Use atomictrycmpxchg in epstateupdate (git-fixes).
ALSA: usb-audio: Workaround for XRUN at prepare (git-fixes).
amd-pstate: Fix amd_pstate mode switch (git-fixes).
ASoC: amd: acp: fix for invalid dai id handling in acpgetbyte_count() (git-fixes).
ASoC: atmel: Fix the 8K sample parameter in I2SC master (git-fixes).
ASoc: codecs: ES8316: Fix DMIC config (git-fixes).
ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes).
ASoC: codecs: wcd934x: fix resource leaks on component remove (git-fixes).
ASoC: codecs: wcd938x: fix codec initialisation race (git-fixes).
ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes).
ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes).
ASoC: codecs: wcd938x: fix soundwire initialisation race (git-fixes).
ASoC: da7219: Check for failure reading AAD IRQ events (git-fixes).
ASoC: da7219: Flush pending AAD IRQ when suspending (git-fixes).
ASoC: fsl_sai: Disable bit clock with transmitter (git-fixes).
ASoC: fsl_spdif: Silence output on stop (git-fixes).
ASoC: rt5640: Fix sleep in atomic context (git-fixes).
ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 (git-fixes).
ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 (git-fixes).
ASoC: rt711: fix for JD event handling in ClockStop Mode0 (git-fixes).
ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentrytracefilter_write() (git-fixes).
ASoC: tegra: Fix ADX byte map (git-fixes).
ASoC: tegra: Fix AMX byte map (git-fixes).
ASoC: wm8904: Fill the cache for WM8904ADCTEST_0 register (git-fixes).
ata: patans87415: mark ns87560tf_read static (git-fixes).
block, bfq: Fix division by zero error on zero wsum (bsc#1213653).
block: Fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes).
Bluetooth: hcildisc: check HCIUARTPROTOREADY flag in HCIUARTGETPROTO (bsc#1210780 CVE-2023-31083).
bpf: add missing header file include (bsc#1211738 CVE-2023-0459).
bus: mhi: add new interfaces to handle MHI channels directly (bsc#1207948).
bus: mhi: host: add destroydevice argument to mhipower_down() (bsc#1207948).
can: afcan: fix NULL pointer dereference in canrcv_filter (bsc#1210627 CVE-2023-2166).
can: afcan: fix NULL pointer dereference in canrcv_filter (bsc#1210627 CVE-2023-2166).
can: gsusb: gscanclose(): add missing set of CAN state to CANSTATE_STOPPED (git-fixes).
ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856).
coda: Avoid partial allocation of sig_inputArgs (git-fixes).
cpufreq: amd_pstate: fix wrong lowest perf fetch (bsc#1212445).
cpufreq: amd_pstate: map desired perf into pstate scope for powersave governor (bsc#1212445).
cpufreq: amd-pstate: Add ->fast_switch() callback (bsc#1212445).
cpufreq: amd-pstate: Add AMD P-State frequencies attributes (bsc#1212445).
cpufreq: amd-pstate: Add AMD P-State performance attributes (bsc#1212445).
cpufreq: amd-pstate: add amd-pstate driver parameter for mode selection (bsc#1212445).
cpufreq: amd-pstate: Add boost mode support for AMD P-State (bsc#1212445).
cpufreq: amd-pstate: add driver working mode switch support (bsc#1212445).
cpufreq: amd-pstate: Add fast switch function for AMD P-State (bsc#1212445).
cpufreq: amd-pstate: Add guided autonomous mode (bsc#1212445).
cpufreq: amd-pstate: Add guided mode control support via sysfs (bsc#1212445).
cpufreq: amd-pstate: Add more tracepoint for AMD P-State module (bsc#1212445).
cpufreq: amd-pstate: Add resume and suspend callbacks (bsc#1212445).
cpufreq: amd-pstate: Add trace for AMD P-State module (bsc#1212445).
cpufreq: amd-pstate: avoid uninitialized variable use (bsc#1212445).
cpufreq: amd-pstate: change amd-pstate driver to be built-in type (bsc#1212445).
cpufreq: amd-pstate: convert sprintf with sysfs_emit() (bsc#1212445).
cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSRAMDPERF_CTL register at init (bsc#1212445).
cpufreq: amd-pstate: Expose struct amd_cpudata (bsc#1212445).
cpufreq: amd-pstate: Fix initial highest_perf value (bsc#1212445).
cpufreq: amd-pstate: Fix invalid write to MSRAMDCPPC_REQ (bsc#1212445).
cpufreq: amd-pstate: Fix Kconfig dependencies for AMD P-State (bsc#1212445).
cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering (bsc#1212445).
cpufreq: amd-pstate: Fix struct amd_cpudata kernel-doc comment (bsc#1212445).
cpufreq: amd-pstate: fix white-space (bsc#1212445).
cpufreq: amd-pstate: implement amd pstate cpu online and offline callback (bsc#1212445).
cpufreq: amd-pstate: implement Pstate EPP support for the AMD processors (bsc#1212445).
cpufreq: amd-pstate: implement suspend and resume callbacks (bsc#1212445).
cpufreq: amd-pstate: Introduce a new AMD P-State driver to support future processors (bsc#1212445).
cpufreq: amd-pstate: Introduce the support for the processors with shared memory solution (bsc#1212445).
cpufreq: amd-pstate: Let user know amd-pstate is disabled (bsc#1212445).
cpufreq: amd-pstate: Make amd-pstate EPP driver name hyphenated (bsc#1212445).
cpufreq: amd-pstate: Make varaiable modestatemachine static (bsc#1212445).
cpufreq: amd-pstate: optimize driver working mode selection in amdpstateparam() (bsc#1212445).
cpufreq: amd-pstate: Remove fastswitchpossible flag from active driver (bsc#1212445).
cpufreq: amd-pstate: remove MODULE_LICENSE in non-modules (bsc#1212445).
cpufreq: amd-pstate: Set a fallback policy based on preferred_profile (bsc#1212445).
cpufreq: amd-pstate: simplify cpudata pointer assignment (bsc#1212445).
cpufreq: amd-pstate: Update policy->cur in amdpstateadjust_perf() (bsc#1212445).
cpufreq: amd-pstate: update pstate frequency transition delay time (bsc#1212445).
cpufreq: amd-pstate: Write CPPC enable bit per-socket (bsc#1212445).
crypto: kpp - Add helper to set reqsize (git-fixes).
crypto: qat - Use helper to set reqsize (git-fixes).
dlm: fix missing lkb refcount handling (git-fixes).
dlm: fix plock invalid read (git-fixes).
Documentation: cpufreq: amd-pstate: Move amd_pstate param to alphabetical order (bsc#1212445).
Documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes).
drm/amd: Fix an error handling mistake in pspswinit() (git-fixes).
drm/amd/display: Add monitor specific edid quirk (git-fixes).
drm/amd/display: Add polling method to handle MST reply packet (bsc#1213578).
drm/amd/display: check TG is non-null before checking if enabled (git-fixes).
drm/amd/display: Correct DMUB_FW_VERSION macro (git-fixes).
drm/amd/display: Disable MPC split by default on special asic (git-fixes).
drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
drm/amd/display: fix seamless odm transitions (git-fixes).
drm/amd/display: Keep PHY active for DP displays on DCN31 (git-fixes).
drm/amd/display: only accept async flips for fast updates (git-fixes).
drm/amd/display: Only update link settings after successful MST link train (git-fixes).
drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).
drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 (git-fixes).
drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).
drm/amd/display: Unlock on error path in dmhandlemstsidebandmsgreadyevent() (git-fixes).
drm/amd/pm: add abnormal fan detection for smu 13.0.0 (git-fixes).
drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 (git-fixes).
drm/amd/pm: re-enable the gfx imu when smu resume (git-fixes).
drm/amd/pm: share the code around SMU13 pcie parameters update (git-fixes).
drm/amdgpu: add the fan abnormal detection feature (git-fixes).
drm/amdgpu: avoid restore process run into dead loop (git-fixes).
drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes).
drm/amdgpu: Fix minmax warning (git-fixes).
drm/atomic: Allow vblank-enabled + self-refresh 'disable' (git-fixes).
drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes).
drm/bridge: tc358768: Add atomicgetinputbusfmts() implementation (git-fixes).
drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime (git-fixes).
drm/client: Fix memory leak in drmclientmodeset_probe (git-fixes).
drm/dpmst: Clear MSGRDY flag before sending new message (bsc#1213578).
drm/i915: Do not preserve dpllhwstate for slave crtc in Bigjoiner (git-fixes).
drm/i915: Fix an error handling path in igtwritehuge() (git-fixes).
drm/i915/dpt: Use shmem for dpt objects (git-fixes).
drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks (git-fixes).
drm/msm: Fix ISERRORNULL() vs NULL check in a5xxsubmitinrb() (git-fixes).
drm/msm/adreno: Fix snapshot BINDLESS_DATA size (git-fixes).
drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes).
drm/msm/dpu: drop enum dpucoreperfdatabus_id (git-fixes).
drm/msm/dpu: Set DPUDATAHCTLEN for in INTFSC7180_MASK (git-fixes).
drm/radeon: Fix integer overflow in radeoncsparser_init (git-fixes).
drm/ttm: fix bulk_move corruption when adding a entry (git-fixes).
drm/ttm: fix warning that we shouldn't mix (git-fixes).
drm/vmwgfx: Fix Legacy Display Unit atomic drm support (bsc#1213632).
drm/vmwgfx: Remove explicit and broken vblank handling (bsc#1213632).
drm/vmwgfx: Remove rcu locks from user resources (bsc#1213632).
fbdev: au1200fb: Fix missing IRQ check in au1200fbdrvprobe (git-fixes).
fbdev: imxfb: Removed unneeded releasememregion (git-fixes).
fbdev: imxfb: warn about invalid left/right margin (git-fixes).
file: always lock position for FMODEATOMICPOS (bsc#1213759).
fs: dlm: add midcomms init/start functions (git-fixes).
fs: dlm: do not set stop rx flag after node reset (git-fixes).
fs: dlm: filter user dlm messages for kernel locks (git-fixes).
fs: dlm: fix log of lowcomms vs midcomms (git-fixes).
fs: dlm: fix race between testbit() and queuework() (git-fixes).
fs: dlm: fix race in lowcomms (git-fixes).
fs: dlm: handle -EBUSY first in lock arg validation (git-fixes).
fs: dlm: move sending fin message into state change handling (git-fixes).
fs: dlm: retry accept() until -EAGAIN or error returns (git-fixes).
fs: dlm: return positive pid value for F_GETLK (git-fixes).
fs: dlm: start midcomms before scand (git-fixes).
fs: hfsplus: remove WARNON() from hfspluscat{read,write}inode() (git-fixes).
FS: JFS: Check for read-only mounted filesystem in txBegin (git-fixes).
FS: JFS: Fix null-ptr-deref Read in txBegin (git-fixes).
fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (git-fixes).
gve: Set default duplex configuration to full (git-fixes).
gve: unify driver name usage (git-fixes).
hwmon: (adm1275) Allow setting sample averaging (git-fixes).
hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (git-fixes).
hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (git-fixes).
hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes).
i2c: xiic: Defer xiicwakeup() and _xiicstartxfer() in xiic_process() (git-fixes).
i2c: xiic: Do not try to handle more interrupt events after error (git-fixes).
iavf: check for removal state before IAVFFLAGPFCOMMSFAILED (git-fixes).
iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (git-fixes).
iavf: Fix out-of-bounds when setting channels on remove (git-fixes).
iavf: fix potential deadlock on allocation failure (git-fixes).
iavf: fix reset task race with iavf_remove() (git-fixes).
iavf: Fix use-after-free in free_netdev (git-fixes).
iavf: Move netdevupdatefeatures() into watchdog task (git-fixes).
iavf: use internal state to free traffic IRQs (git-fixes).
iavf: Wait for reset in callbacks which trigger it (git-fixes).
IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes)
ice: Fix max_rate check while configuring TX rate limits (git-fixes).
ice: Fix memory management in iceethtoolfdir.c (git-fixes).
ice: handle extts in the miscellaneous interrupt thread (git-fixes).
igc: Check if hardware TX timestamping is enabled earlier (git-fixes).
igc: Enable and fix RX hash usage by netstack (git-fixes).
igc: Fix inserting of empty frame for launchtime (git-fixes).
igc: Fix Kernel Panic during ndotxtimeout callback (git-fixes).
igc: Fix launchtime before start of cycle (git-fixes).
igc: Fix race condition in PTP tx code (git-fixes).
igc: Handle PPS start time programming for past time values (git-fixes).
igc: Prevent garbled TX queue with XDP ZEROCOPY (git-fixes).
igc: Remove delay during TX ring configuration (git-fixes).
igc: set TP bit in 'supported' and 'advertising' fields of ethtoollinkksettings (git-fixes).
igc: Work around HW bug causing missing timestamps (git-fixes).
Input: i8042 - add Clevo PCX0DX to i8042 quirk table (git-fixes).
Input: iqs269a - do not poll during ATI (git-fixes).
Input: iqs269a - do not poll during suspend or resume (git-fixes).
io_uring: ensure IOPOLL locks around deferred work (bsc#1213272 CVE-2023-21400).
ipv6: rpl: Fix Route of Death (CVE-2023-2156 bsc#1211131).
jffs2: fix memory leak in jffs2dofill_super (git-fixes).
jffs2: fix memory leak in jffs2domount_fs (git-fixes).
jffs2: fix memory leak in jffs2scanmedium (git-fixes).
jffs2: fix use-after-free in jffs2clearxattr_subsystem (git-fixes).
jffs2: GC deadlock reading a page that is used in jffs2writebegin() (git-fixes).
jffs2: reduce stack usage in jffs2buildxattr_subsystem() (git-fixes).
jfs: jfsdmap: Validate dbl2nbperpage while mounting (git-fixes).
kabi/severities: relax kABI for ath11k local symbols (bsc#1207948)
kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes).
KVM: Add GDS_NO support to KVM (bsc#1206418, CVE-2022-40982).
KVM: arm64: Do not read a HW interrupt pending state in user context (git-fixes)
KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620)
KVM: Do not null dereference ops->destroy (git-fixes)
KVM: downgrade two BUGONs to WARNON_ONCE (git-fixes)
KVM: Initialize debugfs_dentry when a VM is created to avoid NULL (git-fixes)
KVM: s390: pv: fix index value of replaced ASCE (git-fixes bsc#1213867).
KVM: VMX: Inject #GP on ENCLS if vCPU has paging disabled (CR0.PG==0) (git-fixes).
KVM: VMX: Inject #GP, not #UD, if SGX2 ENCLS leafs are unsupported (git-fixes).
KVM: VMX: restore vmx_vmexit alignment (git-fixes).
KVM: x86: Account fastpath-only VM-Exits in vCPU stats (git-fixes).
leds: trigger: netdev: Recheck NETDEVLEDMODE_LINKUP on dev rename (git-fixes).
libceph: harden msgr2.1 frame segment length checks (bsc#1213857).
md: add error_handlers for raid0 and linear (bsc#1212766).
media: staging: atomisp: select V4L2_FWNODE (git-fixes).
mhipowerdown() kABI workaround (bsc#1207948).
mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes).
mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes).
net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes).
net: mana: Batch ringing RX queue doorbell on receiving packets (bsc#1212901).
net: mana: Use the correct WQE count for ringing RQ doorbell (bsc#1212901).
net: nfc: Fix use-after-free caused by nfcllcpfind_local (bsc#1213601 CVE-2023-3863).
net: phy: marvell10g: fix 88x3310 power up (git-fixes).
net/mlx5: DR, Support SW created encap actions for FW table (git-fixes).
net/mlx5e: Check for NOT_READY flag state after locking (git-fixes).
net/mlx5e: fix double free in mlx5edestroyflow_table (git-fixes).
net/mlx5e: fix memory leak in mlx5efsttredirectany_create (git-fixes).
net/mlx5e: fix memory leak in mlx5eptpopen (git-fixes).
net/mlx5e: XDP, Allow growing tail for XDP multi buffer (git-fixes).
net/mlx5e: xsk: Set napi_id to support busy polling on XSK RQ (git-fixes).
net/sched: cls_fw: Fix improper refcount update leads to use-after-free (CVE-2023-3776 bsc#1213588).
net/sched: cls_u32: Fix reference counter leak leading to overflow (CVE-2023-3609 bsc#1213586).
net/sched: schqfq: account for stab overhead in qfqenqueue (CVE-2023-3611 bsc#1213585).
net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).
net/sched: sch_qfq: reintroduce lmax bound check for MTU (bsc#1213585).
netfilter: nftsetpipapo: fix improper element removal (bsc#1213812 CVE-2023-4004).
nfc: llcp: simplify llcpsockconnect() error paths (bsc#1213601 CVE-2023-3863).
nfsd: add encoding of op_recall flag for write delegation (git-fixes).
nfsd: fix double fget() bug in _writeports_addfd() (git-fixes).
nfsd: Fix sparse warning (git-fixes).
nfsd: Remove open coding of string copy (git-fixes).
NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (git-fixes).
NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (git-fixes).
nvme-pci: fix DMA direction of unmapping integrity data (git-fixes).
nvme-pci: remove nvmequeue from nvmeiod (git-fixes).
nvme: do not reject probe due to duplicate IDs for single-ported PCIe devices (git-fixes).
nvme: fix the NVMEIDNSNVMSTS_MASK definition (git-fixes).
octeontx-af: fix hardware timestamp configuration (git-fixes).
octeontx2-af: Move validation of ptp pointer before its usage (git-fixes).
octeontx2-pf: Add additional check for MCAM rules (git-fixes).
PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes).
PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes).
phy: hisilicon: Fix an out of bounds check in hisiinnophy_probe() (git-fixes).
pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes).
pinctrl: amd: Do not show Invalid config param errors (git-fixes).
pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes).
pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes).
pinctrl: amd: Use amdpinconfset() for all config options (git-fixes).
platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (git-fixes).
RDMA/bnxt_re: Fix hang during driver unload (git-fixes)
RDMA/bnxt_re: Prevent handling any completions after qp destroy (git-fixes)
RDMA/core: Update CMA destination address on rdmaresolveaddr (git-fixes)
RDMA/irdma: Add missing read barriers (git-fixes)
RDMA/irdma: Fix data race on CQP completion stats (git-fixes)
RDMA/irdma: Fix data race on CQP request done (git-fixes)
RDMA/irdma: Fix op_type reporting in CQEs (git-fixes)
RDMA/irdma: Report correct WC error (git-fixes)
RDMA/mlx4: Make check for invalid flags stricter (git-fixes)
RDMA/mthca: Fix crash when polling CQ for shared QPs (git-fixes)
regmap: Account for register length in SMBus I/O limits (git-fixes).
regmap: Drop initial version of maximum transfer length fixes (git-fixes).
relayfs: fix out-of-bounds access in relayfileread (bsc#1212502 CVE-2023-3268).
rxrpc, afs: Fix selection of abort codes (git-fixes).
s390: introduce nospecusestrampoline() (git-fixes bsc#1213870).
s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870).
s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810).
s390/dasd: print copy pair message only for the correct error (git-fixes bsc#1213872).
s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863).
s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871).
s390/qeth: Fix vipa deletion (git-fixes bsc#1213713).
s390/vmem: fix empty page tables cleanup under KASAN (git-fixes bsc#1213715).
scftorture: Count reschedule IPIs (git-fixes).
scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected (bsc#1213756).
scsi: lpfc: Avoid -Wstringop-overflow warning (bsc#1213756).
scsi: lpfc: Clean up SLI-4 sysfs resource reporting (bsc#1213756).
scsi: lpfc: Copyright updates for 14.2.0.14 patches (bsc#1213756).
scsi: lpfc: Fix a possible data race in lpfcunregisterfcf_rescan() (bsc#1213756).
scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path (bsc#1213756).
scsi: lpfc: Fix incorrect big endian type assignments in FDMI and VMID paths (bsc#1213756).
scsi: lpfc: Fix lpfc_name struct packing (bsc#1213756).
scsi: lpfc: Make fabric zone discovery more robust when handling unsolicited LOGO (bsc#1213756).
scsi: lpfc: Pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756).
scsi: lpfc: Qualify ndlp discovery state when processing RSCN (bsc#1213756).
scsi: lpfc: Refactor cpu affinity assignment paths (bsc#1213756).
scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (bsc#1213756).
scsi: lpfc: Replace all non-returning strlcpy() with strscpy() (bsc#1213756).
scsi: lpfc: Replace one-element array with flexible-array member (bsc#1213756).
scsi: lpfc: Revise ndlp kref handling for devlosstmocallbk and lpfcdrop_node (bsc#1213756).
scsi: lpfc: Set Establish Image Pair service parameter only for Target Functions (bsc#1213756).
scsi: lpfc: Simplify fcp_abort transport callback log message (bsc#1213756).
scsi: lpfc: Update lpfc version to 14.2.0.14 (bsc#1213756).
scsi: lpfc: Use struct_size() helper (bsc#1213756).
scsi: qla2xxx: Adjust IOCB resource on qpair create (bsc#1213747).
scsi: qla2xxx: Array index may go out of bound (bsc#1213747).
scsi: qla2xxx: Avoid fcport pointer dereference (bsc#1213747).
scsi: qla2xxx: Check valid rport returned by fcbsgto_rport() (bsc#1213747).
scsi: qla2xxx: Correct the index of array (bsc#1213747).
scsi: qla2xxx: Drop useless LIST_HEAD (bsc#1213747).
scsi: qla2xxx: Fix buffer overrun (bsc#1213747).
scsi: qla2xxx: Fix command flush during TMF (bsc#1213747).
scsi: qla2xxx: Fix deletion race condition (bsc#1213747).
scsi: qla2xxx: Fix end of loop test (bsc#1213747).
scsi: qla2xxx: Fix erroneous link up failure (bsc#1213747).
scsi: qla2xxx: Fix error code in qla2x00startsp() (bsc#1213747).
scsi: qla2xxx: fix inconsistent TMF timeout (bsc#1213747).
scsi: qla2xxx: Fix NULL pointer dereference in target mode (bsc#1213747).
scsi: qla2xxx: Fix potential NULL pointer dereference (bsc#1213747).
scsi: qla2xxx: Fix session hang in gnl (bsc#1213747).
scsi: qla2xxx: Fix TMF leak through (bsc#1213747).
scsi: qla2xxx: Limit TMF to 8 per function (bsc#1213747).
scsi: qla2xxx: Pointer may be dereferenced (bsc#1213747).
scsi: qla2xxx: Remove unused nvmelswaitq wait queue (bsc#1213747).
scsi: qla2xxx: Replace one-element array with DECLAREFLEXARRAY() helper (bsc#1213747).
scsi: qla2xxx: Silence a static checker warning (bsc#1213747).
scsi: qla2xxx: Turn off noisy message log (bsc#1213747).
scsi: qla2xxx: Update version to 10.02.08.400-k (bsc#1213747).
scsi: qla2xxx: Update version to 10.02.08.500-k (bsc#1213747).
scsi: qla2xxx: Use vmalloc_array() and vcalloc() (bsc#1213747).
selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes).
serial: qcom-geni: drop bogus runtime pm state update (git-fixes).
serial: sifive: Fix sifiveserialconsole_setup() section (git-fixes).
sfc: fix crash when reading stats while NIC is resetting (git-fixes).
sfc: fix XDP queues mode with legacy IRQ (git-fixes).
sfc: use budget for TX completions (git-fixes).
soundwire: qcom: update status correctly with mask (git-fixes).
staging: ks7010: potential buffer overflow in kswlansetencodeext() (git-fixes).
staging: r8712: Fix memory leak in r8712initxmitpriv() (git-fixes).
SUNRPC: always free ctxt when freeing deferred request (git-fixes).
SUNRPC: double free xprt_ctxt while still in use (git-fixes).
SUNRPC: Fix tracesvcregister() call site (git-fixes).
SUNRPC: Fix UAF in svctcplistendataready() (git-fixes).
SUNRPC: Remove dead code in svctcprelease_rqst() (git-fixes).
SUNRPC: remove the maximum number of retries in callbindstatus (git-fixes).
svcrdma: Prevent page release when nothing was received (git-fixes).
tpm_tis: Explicitly check for error code (git-fixes).
tty: ngsm: fix UAF in gsmcleanup_mux (git-fixes).
tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes).
uaccess: Add speculation barrier to copyfromuser() (bsc#1211738 CVE-2023-0459).
ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (git-fixes).
ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 (git-fixes).
ubifs: Error path in ubifsremountrw() seems to wrongly free write buffers (git-fixes).
ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (git-fixes).
ubifs: Fix AA deadlock when setting xattr for encrypted file (git-fixes).
ubifs: Fix build errors as symbol undefined (git-fixes).
ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (git-fixes).
ubifs: Fix memory leak in alloc_wbufs() (git-fixes).
ubifs: Fix memory leak in do_rename (git-fixes).
ubifs: Fix read out-of-bounds in ubifswbufwrite_nolock() (git-fixes).
ubifs: Fix to add refcount once page is set private (git-fixes).
ubifs: Fix wrong dirty space budget for dirty inode (git-fixes).
ubifs: Free memory for tmpfile name (git-fixes).
ubifs: Re-statistic cleaned znode count if commit failed (git-fixes).
ubifs: Rectify space amount budget for mkdir/tmpfile operations (git-fixes).
ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes).
ubifs: Rectify space budget for ubifs_xrename() (git-fixes).
ubifs: Rename whiteout atomically (git-fixes).
ubifs: renamewhiteout: correct olddir size computing (git-fixes).
ubifs: renamewhiteout: Fix double free for whiteoutui->data (git-fixes).
ubifs: Reserve one leb for each journal head while doing budget (git-fixes).
ubifs: setflags: Make dirtiedinod 8 bytes aligned (git-fixes).
ubifs: ubifs_writepage: Mark page dirty after writing inode failed (git-fixes).
usb: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes).
usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes).
usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (git-fixes).
usb: gadget: core: remove unbalanced mutexunlock in usbgadget_activate (git-fixes).
USB: serial: option: add LARA-R6 01B PIDs (git-fixes).
usb: typec: Iterate pds array when showing the pd list (git-fixes).
usb: typec: Set port->pd before adding device for typec_port (git-fixes).
usb: typec: Use sysfsemitat when concatenating the string (git-fixes).
usb: xhci-mtk: set the dma maxsegsize (git-fixes).
vhostnet: revert upendidx only on retriable error (git-fixes).
vhost: support PACKED when setting-getting vring_base (git-fixes).
virtio_net: Fix error unwinding of XDP initialization (git-fixes).
virtio-net: Maintain reverse cleanup order (git-fixes).
wifi: ath11k: add support for suspend in power down state (bsc#1207948).
wifi: ath11k: handle irq enable/disable in several code path (bsc#1207948).
wifi: ath11k: handle thermal device registeration together with MAC (bsc#1207948).
wifi: ath11k: remove MHI LOOPBACK channels (bsc#1207948).
wifi: raycs: Drop useless status variable in parseaddr() (git-fixes).
wifi: raycs: Utilize strnlen() in parseaddr() (git-fixes).
wl3501cs: use ethhwaddrset() (git-fixes).
x86/PVH: obtain VGA console info in Dom0 (git-fixes).
x86/speculation: Add Kconfig option for GDS (bsc#1206418, CVE-2022-40982).
x86/srso: Add IBPB on VMEXIT (bsc#1213287, CVE-2023-20569).
x86/srso: Tie SBPB bit setting to microcode patch detection (bsc#1213287, CVE-2023-20569).
xen/blkfront: Only check REQ_FUA for writes (git-fixes).
xen/pvcalls-back: fix double frees with pvcallsnewactive_socket() (git-fixes).
xfs: AIL needs asynchronous CIL forcing (bsc#1211811).
xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811).
xfs: attach iclog callbacks in xlogcilsetctxwrite_state() (bsc#1211811).
xfs: CIL work is serialised, not pipelined (bsc#1211811).
xfs: do not run shutdown callbacks on active iclogs (bsc#1211811).
xfs: drop async cache flushes from CIL commits (bsc#1211811).
xfs: factor out log write ordering from xlogcilpush_work() (bsc#1211811).
xfs: move the CIL workqueue to the CIL (bsc#1211811).
xfs: move xlogcommitrecord to xfslogcil.c (bsc#1211811).
xfs: order CIL checkpoint start records (bsc#1211811).
xfs: pass a CIL context to xlog_write() (bsc#1211811).
xfs: rework xlogstatedo_callback() (bsc#1211811).
xfs: run callbacks before waking waiters in xlogstateshutdown_callbacks (bsc#1211811).
xfs: separate out log shutdown callback processing (bsc#1211811).
xfs: wait iclog complete before tearing down AIL (bsc#1211811).
xfs: XLOGSTATEIOERROR must die (bsc#1211811).
xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes).
xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes).
xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes).

References

Affected packages

SUSE:Linux Enterprise Module for Public Cloud 15 SP5 / kernel-azure

Package

Name: kernel-azure
Purl: purl:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.21-150500.33.14.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-devel": "5.14.21-150500.33.14.1",
            "kernel-devel-azure": "5.14.21-150500.33.14.1",
            "kernel-syms-azure": "5.14.21-150500.33.14.1",
            "kernel-source-azure": "5.14.21-150500.33.14.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP5 / kernel-source-azure

Package

Name: kernel-source-azure
Purl: purl:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.21-150500.33.14.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-devel": "5.14.21-150500.33.14.1",
            "kernel-devel-azure": "5.14.21-150500.33.14.1",
            "kernel-syms-azure": "5.14.21-150500.33.14.1",
            "kernel-source-azure": "5.14.21-150500.33.14.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP5 / kernel-syms-azure

Package

Name: kernel-syms-azure
Purl: purl:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.21-150500.33.14.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-devel": "5.14.21-150500.33.14.1",
            "kernel-devel-azure": "5.14.21-150500.33.14.1",
            "kernel-syms-azure": "5.14.21-150500.33.14.1",
            "kernel-source-azure": "5.14.21-150500.33.14.1"
        }
    ]
}

openSUSE:Leap 15.5 / kernel-azure

Package

Name: kernel-azure
Purl: purl:rpm/suse/kernel-azure&distro=openSUSE%20Leap%2015.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.21-150500.33.14.1

Ecosystem specific

{
    "binaries": [
        {
            "ocfs2-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-devel-azure": "5.14.21-150500.33.14.1",
            "dlm-kmp-azure": "5.14.21-150500.33.14.1",
            "cluster-md-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-extra": "5.14.21-150500.33.14.1",
            "gfs2-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-optional": "5.14.21-150500.33.14.1",
            "kernel-azure-devel": "5.14.21-150500.33.14.1",
            "kernel-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-vdso": "5.14.21-150500.33.14.1",
            "kselftests-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-syms-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-livepatch-devel": "5.14.21-150500.33.14.1",
            "reiserfs-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-source-azure": "5.14.21-150500.33.14.1"
        }
    ]
}

openSUSE:Leap 15.5 / kernel-source-azure

Package

Name: kernel-source-azure
Purl: purl:rpm/suse/kernel-source-azure&distro=openSUSE%20Leap%2015.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.21-150500.33.14.1

Ecosystem specific

{
    "binaries": [
        {
            "ocfs2-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-devel-azure": "5.14.21-150500.33.14.1",
            "dlm-kmp-azure": "5.14.21-150500.33.14.1",
            "cluster-md-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-extra": "5.14.21-150500.33.14.1",
            "gfs2-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-optional": "5.14.21-150500.33.14.1",
            "kernel-azure-devel": "5.14.21-150500.33.14.1",
            "kernel-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-vdso": "5.14.21-150500.33.14.1",
            "kselftests-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-syms-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-livepatch-devel": "5.14.21-150500.33.14.1",
            "reiserfs-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-source-azure": "5.14.21-150500.33.14.1"
        }
    ]
}

openSUSE:Leap 15.5 / kernel-syms-azure

Package

Name: kernel-syms-azure
Purl: purl:rpm/suse/kernel-syms-azure&distro=openSUSE%20Leap%2015.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.14.21-150500.33.14.1

Ecosystem specific

{
    "binaries": [
        {
            "ocfs2-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-devel-azure": "5.14.21-150500.33.14.1",
            "dlm-kmp-azure": "5.14.21-150500.33.14.1",
            "cluster-md-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-extra": "5.14.21-150500.33.14.1",
            "gfs2-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-optional": "5.14.21-150500.33.14.1",
            "kernel-azure-devel": "5.14.21-150500.33.14.1",
            "kernel-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-vdso": "5.14.21-150500.33.14.1",
            "kselftests-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-syms-azure": "5.14.21-150500.33.14.1",
            "kernel-azure-livepatch-devel": "5.14.21-150500.33.14.1",
            "reiserfs-kmp-azure": "5.14.21-150500.33.14.1",
            "kernel-source-azure": "5.14.21-150500.33.14.1"
        }
    ]
}