SUSE-SU-2023:4733-1
Vulnerability from csaf_suse - Published: 2023-12-12 14:15 - Updated: 2026-10-11 11:47Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch: The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2023-39197: Fixed a out-of-bounds read in nf_conntrack_dccp_packet() (bsc#1216976).
- CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217332).
- CVE-2023-45863: Fixed a out-of-bounds write in fill_kobj_path() (bsc#1216058).
- CVE-2023-45871: Fixed an issue in the IGB driver, where the buffer size may not be adequate for frames larger than the MTU (bsc#1216259).
- CVE-2023-39198: Fixed a race condition leading to use-after-free in qxl_mode_dumb_create() (bsc#1216965).
- CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).
- CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216584).
The following non-security bugs were fixed:
- ALSA: hda: Disable power-save on KONTRON SinglePC (bsc#1217140).
- Call flush_delayed_fput() from nfsd main-loop (bsc#1217408).
- net: mana: Configure hwc timeout from hardware (bsc#1214037).
- net: mana: Fix MANA VF unload when hardware is unresponsive (bsc#1214764).
- powerpc: Do not clobber f0/vs0 during fp|altivec register save (bsc#1217780).
Patchnames: SUSE-2023-4733,SUSE-SUSE-MicroOS-5.1-2023-4733,SUSE-SUSE-MicroOS-5.2-2023-4733
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
2 products, the same list as for
CVE-2023-31083
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
2 products, the same list as for
CVE-2023-31083
Threats
Impact
important
6.4 (Medium)
Affected products
Recommended
2 products, the same list as for
CVE-2023-31083
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
2 products, the same list as for
CVE-2023-31083
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
2 products, the same list as for
CVE-2023-31083
Threats
Impact
important
7.8 (High)
Affected products
Recommended
2 products, the same list as for
CVE-2023-31083
Threats
Impact
important
References
49 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-39197: Fixed a out-of-bounds read in nf_conntrack_dccp_packet() (bsc#1216976).\n- CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217332).\n- CVE-2023-45863: Fixed a out-of-bounds write in fill_kobj_path() (bsc#1216058).\n- CVE-2023-45871: Fixed an issue in the IGB driver, where the buffer size may not be adequate for frames larger than the MTU (bsc#1216259).\n- CVE-2023-39198: Fixed a race condition leading to use-after-free in qxl_mode_dumb_create() (bsc#1216965).\n- CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).\n- CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216584).\n\nThe following non-security bugs were fixed:\n\n- ALSA: hda: Disable power-save on KONTRON SinglePC (bsc#1217140).\n- Call flush_delayed_fput() from nfsd main-loop (bsc#1217408).\n- net: mana: Configure hwc timeout from hardware (bsc#1214037).\n- net: mana: Fix MANA VF unload when hardware is unresponsive (bsc#1214764).\n- powerpc: Do not clobber f0/vs0 during fp|altivec register save (bsc#1217780).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2023-4733,SUSE-SUSE-MicroOS-5.1-2023-4733,SUSE-SUSE-MicroOS-5.2-2023-4733",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_4733-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2023:4733-1",
"url": "https://www.suse.com/support/update/announcement/2023/suse-su-20234733-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2023:4733-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2023-December/033075.html"
},
{
"category": "self",
"summary": "SUSE Bug 1084909",
"url": "https://bugzilla.suse.com/1084909"
},
{
"category": "self",
"summary": "SUSE Bug 1210780",
"url": "https://bugzilla.suse.com/1210780"
},
{
"category": "self",
"summary": "SUSE Bug 1214037",
"url": "https://bugzilla.suse.com/1214037"
},
{
"category": "self",
"summary": "SUSE Bug 1214344",
"url": "https://bugzilla.suse.com/1214344"
},
{
"category": "self",
"summary": "SUSE Bug 1214764",
"url": "https://bugzilla.suse.com/1214764"
},
{
"category": "self",
"summary": "SUSE Bug 1215371",
"url": "https://bugzilla.suse.com/1215371"
},
{
"category": "self",
"summary": "SUSE Bug 1216058",
"url": "https://bugzilla.suse.com/1216058"
},
{
"category": "self",
"summary": "SUSE Bug 1216259",
"url": "https://bugzilla.suse.com/1216259"
},
{
"category": "self",
"summary": "SUSE Bug 1216584",
"url": "https://bugzilla.suse.com/1216584"
},
{
"category": "self",
"summary": "SUSE Bug 1216965",
"url": "https://bugzilla.suse.com/1216965"
},
{
"category": "self",
"summary": "SUSE Bug 1216976",
"url": "https://bugzilla.suse.com/1216976"
},
{
"category": "self",
"summary": "SUSE Bug 1217140",
"url": "https://bugzilla.suse.com/1217140"
},
{
"category": "self",
"summary": "SUSE Bug 1217332",
"url": "https://bugzilla.suse.com/1217332"
},
{
"category": "self",
"summary": "SUSE Bug 1217408",
"url": "https://bugzilla.suse.com/1217408"
},
{
"category": "self",
"summary": "SUSE Bug 1217780",
"url": "https://bugzilla.suse.com/1217780"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-31083 page",
"url": "https://www.suse.com/security/cve/CVE-2023-31083/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-39197 page",
"url": "https://www.suse.com/security/cve/CVE-2023-39197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-39198 page",
"url": "https://www.suse.com/security/cve/CVE-2023-39198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-45863 page",
"url": "https://www.suse.com/security/cve/CVE-2023-45863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-45871 page",
"url": "https://www.suse.com/security/cve/CVE-2023-45871/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-5717 page",
"url": "https://www.suse.com/security/cve/CVE-2023-5717/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6176 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6176/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2026-10-11T11:47:00Z",
"generator": {
"date": "2023-12-12T14:15:30Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2023:4733-1",
"initial_release_date": "2023-12-12T14:15:30Z",
"revision_history": [
{
"date": "2023-12-12T14:15:30Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T15:33:27Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-10-11T11:47:00Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-rt-0:5.3.18-150300.152.1.noarch",
"product": {
"name": "kernel-devel-rt-0:5.3.18-150300.152.1.noarch",
"product_id": "kernel-devel-rt-0:5.3.18-150300.152.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel-rt@5.3.18-150300.152.1?arch=noarch\u0026upstream=kernel-source-rt-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-rt-0:5.3.18-150300.152.1.noarch",
"product": {
"name": "kernel-source-rt-0:5.3.18-150300.152.1.noarch",
"product_id": "kernel-source-rt-0:5.3.18-150300.152.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-rt@5.3.18-150300.152.1?arch=noarch\u0026upstream=kernel-source-rt-0:5.3.18-150300.152.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "cluster-md-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product_id": "cluster-md-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/cluster-md-kmp-rt@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-source-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "cluster-md-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "cluster-md-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_id": "cluster-md-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/cluster-md-kmp-rt_debug@5.3.18-150300.152.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dlm-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "dlm-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product_id": "dlm-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/dlm-kmp-rt@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-source-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "dlm-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "dlm-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_id": "dlm-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/dlm-kmp-rt_debug@5.3.18-150300.152.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gfs2-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "gfs2-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product_id": "gfs2-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gfs2-kmp-rt@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-source-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "gfs2-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "gfs2-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_id": "gfs2-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/gfs2-kmp-rt_debug@5.3.18-150300.152.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kernel-rt-0:5.3.18-150300.152.1.x86_64",
"product_id": "kernel-rt-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-rt@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-source-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-devel-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kernel-rt-devel-0:5.3.18-150300.152.1.x86_64",
"product_id": "kernel-rt-devel-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-rt-devel@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-source-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-extra-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kernel-rt-extra-0:5.3.18-150300.152.1.x86_64",
"product_id": "kernel-rt-extra-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-rt-extra@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-source-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-livepatch-devel-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kernel-rt-livepatch-devel-0:5.3.18-150300.152.1.x86_64",
"product_id": "kernel-rt-livepatch-devel-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-rt-livepatch-devel@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-rt-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-optional-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kernel-rt-optional-0:5.3.18-150300.152.1.x86_64",
"product_id": "kernel-rt-optional-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-rt-optional@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-rt-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kernel-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_id": "kernel-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-rt_debug@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-rt_debug-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-devel-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kernel-rt_debug-devel-0:5.3.18-150300.152.1.x86_64",
"product_id": "kernel-rt_debug-devel-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-rt_debug-devel@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-rt_debug-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-extra-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kernel-rt_debug-extra-0:5.3.18-150300.152.1.x86_64",
"product_id": "kernel-rt_debug-extra-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-rt_debug-extra@5.3.18-150300.152.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-livepatch-devel-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kernel-rt_debug-livepatch-devel-0:5.3.18-150300.152.1.x86_64",
"product_id": "kernel-rt_debug-livepatch-devel-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-rt_debug-livepatch-devel@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-rt_debug-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-optional-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kernel-rt_debug-optional-0:5.3.18-150300.152.1.x86_64",
"product_id": "kernel-rt_debug-optional-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-rt_debug-optional@5.3.18-150300.152.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-syms-rt-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kernel-syms-rt-0:5.3.18-150300.152.1.x86_64",
"product_id": "kernel-syms-rt-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-syms-rt@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-syms-rt-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kselftests-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kselftests-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product_id": "kselftests-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kselftests-kmp-rt@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-rt-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kselftests-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "kselftests-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_id": "kselftests-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kselftests-kmp-rt_debug@5.3.18-150300.152.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "ocfs2-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product_id": "ocfs2-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/ocfs2-kmp-rt@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-rt-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "ocfs2-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_id": "ocfs2-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ocfs2-kmp-rt_debug@5.3.18-150300.152.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "reiserfs-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "reiserfs-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product_id": "reiserfs-kmp-rt-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.3.18:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/reiserfs-kmp-rt@5.3.18-150300.152.1?arch=x86_64\u0026upstream=kernel-rt-0:5.3.18-150300.152.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "reiserfs-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product": {
"name": "reiserfs-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_id": "reiserfs-kmp-rt_debug-0:5.3.18-150300.152.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/reiserfs-kmp-rt_debug@5.3.18-150300.152.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.1",
"product": {
"name": "SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.2",
"product": {
"name": "SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:5.3.18-150300.152.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64"
},
"product_reference": "kernel-rt-0:5.3.18-150300.152.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:5.3.18-150300.152.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
},
"product_reference": "kernel-rt-0:5.3.18-150300.152.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-31083",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-31083"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu-\u003eproto is set. A NULL pointer dereference may occur.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-31083",
"url": "https://www.suse.com/security/cve/CVE-2023-31083"
},
{
"category": "external",
"summary": "SUSE Bug 1210780 for CVE-2023-31083",
"url": "https://bugzilla.suse.com/1210780"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-12-12T14:15:30Z",
"details": "moderate"
}
],
"title": "CVE-2023-31083"
},
{
"cve": "CVE-2023-39197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-39197"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-39197",
"url": "https://www.suse.com/security/cve/CVE-2023-39197"
},
{
"category": "external",
"summary": "SUSE Bug 1216976 for CVE-2023-39197",
"url": "https://bugzilla.suse.com/1216976"
},
{
"category": "external",
"summary": "SUSE Bug 1220015 for CVE-2023-39197",
"url": "https://bugzilla.suse.com/1220015"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-12-12T14:15:30Z",
"details": "moderate"
}
],
"title": "CVE-2023-39197"
},
{
"cve": "CVE-2023-39198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-39198"
}
],
"notes": [
{
"category": "general",
"text": "A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-39198",
"url": "https://www.suse.com/security/cve/CVE-2023-39198"
},
{
"category": "external",
"summary": "SUSE Bug 1216965 for CVE-2023-39198",
"url": "https://bugzilla.suse.com/1216965"
},
{
"category": "external",
"summary": "SUSE Bug 1217116 for CVE-2023-39198",
"url": "https://bugzilla.suse.com/1217116"
},
{
"category": "external",
"summary": "SUSE Bug 1219703 for CVE-2023-39198",
"url": "https://bugzilla.suse.com/1219703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-12-12T14:15:30Z",
"details": "important"
}
],
"title": "CVE-2023-39198"
},
{
"cve": "CVE-2023-45863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-45863"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-45863",
"url": "https://www.suse.com/security/cve/CVE-2023-45863"
},
{
"category": "external",
"summary": "SUSE Bug 1216058 for CVE-2023-45863",
"url": "https://bugzilla.suse.com/1216058"
},
{
"category": "external",
"summary": "SUSE Bug 1220015 for CVE-2023-45863",
"url": "https://bugzilla.suse.com/1220015"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-12-12T14:15:30Z",
"details": "moderate"
}
],
"title": "CVE-2023-45863"
},
{
"cve": "CVE-2023-45871",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-45871"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-45871",
"url": "https://www.suse.com/security/cve/CVE-2023-45871"
},
{
"category": "external",
"summary": "SUSE Bug 1216259 for CVE-2023-45871",
"url": "https://bugzilla.suse.com/1216259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-12-12T14:15:30Z",
"details": "moderate"
}
],
"title": "CVE-2023-45871"
},
{
"cve": "CVE-2023-5717",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-5717"
}
],
"notes": [
{
"category": "general",
"text": "A heap out-of-bounds write vulnerability in the Linux kernel\u0027s Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.\n\nIf perf_read_group() is called while an event\u0027s sibling_list is smaller than its child\u0027s sibling_list, it can increment or write to memory locations outside of the allocated buffer.\n\nWe recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-5717",
"url": "https://www.suse.com/security/cve/CVE-2023-5717"
},
{
"category": "external",
"summary": "SUSE Bug 1216584 for CVE-2023-5717",
"url": "https://bugzilla.suse.com/1216584"
},
{
"category": "external",
"summary": "SUSE Bug 1216644 for CVE-2023-5717",
"url": "https://bugzilla.suse.com/1216644"
},
{
"category": "external",
"summary": "SUSE Bug 1217557 for CVE-2023-5717",
"url": "https://bugzilla.suse.com/1217557"
},
{
"category": "external",
"summary": "SUSE Bug 1219697 for CVE-2023-5717",
"url": "https://bugzilla.suse.com/1219697"
},
{
"category": "external",
"summary": "SUSE Bug 1220191 for CVE-2023-5717",
"url": "https://bugzilla.suse.com/1220191"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-12-12T14:15:30Z",
"details": "important"
}
],
"title": "CVE-2023-5717"
},
{
"cve": "CVE-2023-6176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6176"
}
],
"notes": [
{
"category": "general",
"text": "A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6176",
"url": "https://www.suse.com/security/cve/CVE-2023-6176"
},
{
"category": "external",
"summary": "SUSE Bug 1217332 for CVE-2023-6176",
"url": "https://bugzilla.suse.com/1217332"
},
{
"category": "external",
"summary": "SUSE Bug 1217522 for CVE-2023-6176",
"url": "https://bugzilla.suse.com/1217522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.1:kernel-rt-0:5.3.18-150300.152.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:kernel-rt-0:5.3.18-150300.152.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-12-12T14:15:30Z",
"details": "important"
}
],
"title": "CVE-2023-6176"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.