RHSA-2023:3723
Vulnerability from csaf_opensuse - Published: 2023-06-21 00:00 - Updated: 2026-09-20 11:29Summary
security update for kernel
Severity
Low
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2023:3723.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2023:3723.
Patchnames: RHSA-2023:3723
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
27 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.7 (Medium)
Affected products
Recommended
27 products, the same list as for
CVE-2023-2002
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
27 products, the same list as for
CVE-2023-2002
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
27 products, the same list as for
CVE-2023-2002
Threats
Impact
important
7.8 (High)
Affected products
Recommended
27 products, the same list as for
CVE-2023-2002
Threats
Impact
important
7.8 (High)
Affected products
Recommended
27 products, the same list as for
CVE-2023-2002
Threats
Impact
important
6.3 (Medium)
Affected products
Recommended
27 products, the same list as for
CVE-2023-2002
Threats
Impact
moderate
References
29 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2023:3723.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2023:3723.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2023:3723",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2023_3723.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2002 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2124 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2124/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2194 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2235 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2235/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-28466 page",
"url": "https://www.suse.com/security/cve/CVE-2023-28466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-32233 page",
"url": "https://www.suse.com/security/cve/CVE-2023-32233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-54325 page",
"url": "https://www.suse.com/security/cve/CVE-2023-54325/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:29:37Z",
"generator": {
"date": "2023-06-21T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2023:3723",
"initial_release_date": "2023-06-21T00:00:00Z",
"revision_history": [
{
"date": "2023-06-21T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:29:37Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"product": {
"name": "kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"product_id": "kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@5.14.0-284.18.1.el9_2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"product": {
"name": "kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"product_id": "kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@5.14.0-284.18.1.el9_2?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"product": {
"name": "bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"product_id": "bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@7.0.0-284.18.1.el9_2?arch=x86_64\u0026upstream=bpftool-0:7.0.0-284.18.1.el9_2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@5.14.0-284.18.1.el9_2?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-284.18.1.el9_2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@5.14.0-284.18.1.el9_2?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-284.18.1.el9_2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-devel-matched@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-core@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-uki-virt@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@5.14.0-284.18.1.el9_2?arch=x86_64\u0026upstream=kernel-source-0:5.14.0-284.18.1.el9_2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-devel-matched@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-core@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "perf-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "perf-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@5.14.0-284.18.1.el9_2?arch=x86_64\u0026upstream=perf-0:5.14.0-284.18.1.el9_2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@5.14.0-284.18.1.el9_2?arch=x86_64\u0026upstream=perf-0:5.14.0-284.18.1.el9_2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rtla-0:5.14.0-284.18.1.el9_2.x86_64",
"product": {
"name": "rtla-0:5.14.0-284.18.1.el9_2.x86_64",
"product_id": "rtla-0:5.14.0-284.18.1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rtla@5.14.0-284.18.1.el9_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:7.0.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64"
},
"product_reference": "bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch"
},
"product_reference": "kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:5.14.0-284.18.1.el9_2.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch"
},
"product_reference": "kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "perf-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rtla-0:5.14.0-284.18.1.el9_2.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
},
"product_reference": "rtla-0:5.14.0-284.18.1.el9_2.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-2002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2002"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2002",
"url": "https://www.suse.com/security/cve/CVE-2023-2002"
},
{
"category": "external",
"summary": "SUSE Bug 1210533 for CVE-2023-2002",
"url": "https://bugzilla.suse.com/1210533"
},
{
"category": "external",
"summary": "SUSE Bug 1210566 for CVE-2023-2002",
"url": "https://bugzilla.suse.com/1210566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-06-21T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2002"
},
{
"cve": "CVE-2023-2124",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2124"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds memory access flaw was found in the Linux kernel\u0027s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2124",
"url": "https://www.suse.com/security/cve/CVE-2023-2124"
},
{
"category": "external",
"summary": "SUSE Bug 1210498 for CVE-2023-2124",
"url": "https://bugzilla.suse.com/1210498"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-06-21T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-2124"
},
{
"cve": "CVE-2023-2194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2194"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds write vulnerability was found in the Linux kernel\u0027s SLIMpro I2C device driver. The userspace \"data-\u003eblock[0]\" variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to crash the system or potentially achieve code execution.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2194",
"url": "https://www.suse.com/security/cve/CVE-2023-2194"
},
{
"category": "external",
"summary": "SUSE Bug 1210715 for CVE-2023-2194",
"url": "https://bugzilla.suse.com/1210715"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-06-21T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-2194"
},
{
"cve": "CVE-2023-2235",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2235"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.\n\n\n\nThe perf_group_detach function did not check the event\u0027s siblings\u0027 attach_state before calling add_event_to_groups(), but remove_on_exec made it possible to call list_del_event() on before detaching from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability.\n\n\n\nWe recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2235",
"url": "https://www.suse.com/security/cve/CVE-2023-2235"
},
{
"category": "external",
"summary": "SUSE Bug 1210986 for CVE-2023-2235",
"url": "https://bugzilla.suse.com/1210986"
},
{
"category": "external",
"summary": "SUSE Bug 1210987 for CVE-2023-2235",
"url": "https://bugzilla.suse.com/1210987"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-06-21T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-2235"
},
{
"cve": "CVE-2023-28466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-28466"
}
],
"notes": [
{
"category": "general",
"text": "do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-28466",
"url": "https://www.suse.com/security/cve/CVE-2023-28466"
},
{
"category": "external",
"summary": "SUSE Bug 1209366 for CVE-2023-28466",
"url": "https://bugzilla.suse.com/1209366"
},
{
"category": "external",
"summary": "SUSE Bug 1210452 for CVE-2023-28466",
"url": "https://bugzilla.suse.com/1210452"
},
{
"category": "external",
"summary": "SUSE Bug 1211833 for CVE-2023-28466",
"url": "https://bugzilla.suse.com/1211833"
},
{
"category": "external",
"summary": "SUSE Bug 1213841 for CVE-2023-28466",
"url": "https://bugzilla.suse.com/1213841"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-06-21T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-28466"
},
{
"cve": "CVE-2023-32233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-32233"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-32233",
"url": "https://www.suse.com/security/cve/CVE-2023-32233"
},
{
"category": "external",
"summary": "SUSE Bug 1211043 for CVE-2023-32233",
"url": "https://bugzilla.suse.com/1211043"
},
{
"category": "external",
"summary": "SUSE Bug 1211187 for CVE-2023-32233",
"url": "https://bugzilla.suse.com/1211187"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-06-21T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-32233"
},
{
"cve": "CVE-2023-54325",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-54325"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat - fix out-of-bounds read\n\nWhen preparing an AER-CTR request, the driver copies the key provided by\nthe user into a data structure that is accessible by the firmware.\nIf the target device is QAT GEN4, the key size is rounded up by 16 since\na rounded up size is expected by the device.\nIf the key size is rounded up before the copy, the size used for copying\nthe key might be bigger than the size of the region containing the key,\ncausing an out-of-bounds read.\n\nFix by doing the copy first and then update the keylen.\n\nThis is to fix the following warning reported by KASAN:\n\n\t[ 138.150574] BUG: KASAN: global-out-of-bounds in qat_alg_skcipher_init_com.isra.0+0x197/0x250 [intel_qat]\n\t[ 138.150641] Read of size 32 at addr ffffffff88c402c0 by task cryptomgr_test/2340\n\n\t[ 138.150651] CPU: 15 PID: 2340 Comm: cryptomgr_test Not tainted 6.2.0-rc1+ #45\n\t[ 138.150659] Hardware name: Intel Corporation ArcherCity/ArcherCity, BIOS EGSDCRB1.86B.0087.D13.2208261706 08/26/2022\n\t[ 138.150663] Call Trace:\n\t[ 138.150668] \u003cTASK\u003e\n\t[ 138.150922] kasan_check_range+0x13a/0x1c0\n\t[ 138.150931] memcpy+0x1f/0x60\n\t[ 138.150940] qat_alg_skcipher_init_com.isra.0+0x197/0x250 [intel_qat]\n\t[ 138.151006] qat_alg_skcipher_init_sessions+0xc1/0x240 [intel_qat]\n\t[ 138.151073] crypto_skcipher_setkey+0x82/0x160\n\t[ 138.151085] ? prepare_keybuf+0xa2/0xd0\n\t[ 138.151095] test_skcipher_vec_cfg+0x2b8/0x800",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-54325",
"url": "https://www.suse.com/security/cve/CVE-2023-54325"
},
{
"category": "external",
"summary": "SUSE Bug 1255757 for CVE-2023-54325",
"url": "https://bugzilla.suse.com/1255757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:bpftool-0:7.0.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-doc-0:5.14.0-284.18.1.el9_2.noarch",
"SUSE Liberty Linux 9:kernel-headers-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:python3-perf-0:5.14.0-284.18.1.el9_2.x86_64",
"SUSE Liberty Linux 9:rtla-0:5.14.0-284.18.1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-06-21T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-54325"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…