{"id":"SUSE-SU-2024:0118-1","summary":"Security update for the Linux Kernel","details":"The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks (bsc#1179610 bsc#1215237).\n- CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bsc#1202095).\n- CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250).\n- CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947).\n- CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946).\n- CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218258).\n- CVE-2023-6932: Fixed a use-after-free issue when receiving an IGMP query packet due to reference count mismanagement (bsc#1218253).\n- CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559).\n\nThe following non-security bugs were fixed:\n\n- Enabled the LLC counters for “perf” (perf stat) on the Ice-Lake and Rocket-Lake CPUs (jsc#PED-5023 bsc#1211439).\n- Reviewed and added more information to README.SUSE (jsc#PED-5021).\n- Enabled multibuild for kernel packages (JSC-SLE#5501, boo#1211226, bsc#1218184).\n- Fix termination state for idr_for_each_entry_ul() (bsc#1109837).\n- KVM: s390/mm: Properly reset no-dat (bsc#1218057).\n- KVM: s390: vsie: fix wrong VIR 37 when MSO is used (bsc#1217936).\n- PCI: Disable ATS for specific Intel IPU E2000 devices (bsc#1218622).\n- Previous perf cve-4.12-\u003eSLE12-SP5 manual merge was incorrect. Fix.\n- gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479).\n- gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479).\n- gve: Changes to add new TX queues (bsc#1214479).\n- gve: Control path for DQO-QPL (bsc#1214479).\n- gve: Do not fully free QPL pages on prefill errors (bsc#1214479).\n- gve: Fix gve interrupt names (bsc#1214479).\n- gve: Fixes for napi_poll when budget is 0 (bsc#1214479).\n- gve: RX path for DQO-QPL (bsc#1214479).\n- gve: Set default duplex configuration to full (bsc#1214479).\n- gve: Tx path for DQO-QPL (bsc#1214479).\n- gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479).\n- gve: XDP support GQI-QPL: helper function changes (bsc#1214479).\n- gve: fix frag_list chaining (bsc#1214479).\n- gve: trivial spell fix Recive to Receive (bsc#1214479).\n- gve: unify driver name usage (bsc#1214479).\n- net/tg3: fix race condition in tg3_reset_task() (bsc#1217801).\n- net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1217801).\n- s390/vx: fix save/restore of fpu kernel context (bsc#1218362).\n- tracing: Fix a possible race when disabling buffered events (bsc#1217036).\n- tracing: Fix a warning when allocating buffered events fails (bsc#1217036).\n- tracing: Fix incomplete locking when disabling buffered events (bsc#1217036).\n- tracing: Fix warning in trace_buffered_event_disable() (bsc#1217036).\n","modified":"2026-02-04T03:40:30.213084Z","published":"2024-01-16T12:31:39Z","related":["CVE-2020-26555","CVE-2022-2586","CVE-2023-51779","CVE-2023-6121","CVE-2023-6606","CVE-2023-6610","CVE-2023-6931","CVE-2023-6932"],"upstream":["CVE-2020-26555","CVE-2022-2586","CVE-2023-51779","CVE-2023-6121","CVE-2023-6606","CVE-2023-6610","CVE-2023-6931","CVE-2023-6932"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240118-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1109837"},{"type":"REPORT","url":"https://bugzilla.suse.com/1179610"},{"type":"REPORT","url":"https://bugzilla.suse.com/1202095"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211226"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211439"},{"type":"REPORT","url":"https://bugzilla.suse.com/1214479"},{"type":"REPORT","url":"https://bugzilla.suse.com/1215237"},{"type":"REPORT","url":"https://bugzilla.suse.com/1217036"},{"type":"REPORT","url":"https://bugzilla.suse.com/1217250"},{"type":"REPORT","url":"https://bugzilla.suse.com/1217801"},{"type":"REPORT","url":"https://bugzilla.suse.com/1217936"},{"type":"REPORT","url":"https://bugzilla.suse.com/1217946"},{"type":"REPORT","url":"https://bugzilla.suse.com/1217947"},{"type":"REPORT","url":"https://bugzilla.suse.com/1218057"},{"type":"REPORT","url":"https://bugzilla.suse.com/1218184"},{"type":"REPORT","url":"https://bugzilla.suse.com/1218253"},{"type":"REPORT","url":"https://bugzilla.suse.com/1218258"},{"type":"REPORT","url":"https://bugzilla.suse.com/1218362"},{"type":"REPORT","url":"https://bugzilla.suse.com/1218559"},{"type":"REPORT","url":"https://bugzilla.suse.com/1218622"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-26555"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-2586"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-51779"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-6121"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-6606"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-6610"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-6931"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-6932"}],"affected":[{"package":{"name":"kernel-rt","ecosystem":"SUSE:Linux Enterprise Real Time 12 SP5","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-10.157.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt-devel":"4.12.14-10.157.1","gfs2-kmp-rt":"4.12.14-10.157.1","ocfs2-kmp-rt":"4.12.14-10.157.1","kernel-rt_debug":"4.12.14-10.157.1","kernel-rt_debug-devel":"4.12.14-10.157.1","cluster-md-kmp-rt":"4.12.14-10.157.1","kernel-devel-rt":"4.12.14-10.157.1","kernel-rt-base":"4.12.14-10.157.1","kernel-rt":"4.12.14-10.157.1","kernel-source-rt":"4.12.14-10.157.1","dlm-kmp-rt":"4.12.14-10.157.1","kernel-syms-rt":"4.12.14-10.157.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0118-1.json"}},{"package":{"name":"kernel-rt_debug","ecosystem":"SUSE:Linux Enterprise Real Time 12 SP5","purl":"pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-10.157.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt-devel":"4.12.14-10.157.1","gfs2-kmp-rt":"4.12.14-10.157.1","ocfs2-kmp-rt":"4.12.14-10.157.1","kernel-rt_debug":"4.12.14-10.157.1","kernel-rt_debug-devel":"4.12.14-10.157.1","cluster-md-kmp-rt":"4.12.14-10.157.1","kernel-devel-rt":"4.12.14-10.157.1","kernel-rt-base":"4.12.14-10.157.1","kernel-rt":"4.12.14-10.157.1","kernel-source-rt":"4.12.14-10.157.1","dlm-kmp-rt":"4.12.14-10.157.1","kernel-syms-rt":"4.12.14-10.157.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0118-1.json"}},{"package":{"name":"kernel-source-rt","ecosystem":"SUSE:Linux Enterprise Real Time 12 SP5","purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-10.157.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt-devel":"4.12.14-10.157.1","gfs2-kmp-rt":"4.12.14-10.157.1","ocfs2-kmp-rt":"4.12.14-10.157.1","kernel-rt_debug":"4.12.14-10.157.1","kernel-rt_debug-devel":"4.12.14-10.157.1","cluster-md-kmp-rt":"4.12.14-10.157.1","kernel-devel-rt":"4.12.14-10.157.1","kernel-rt-base":"4.12.14-10.157.1","kernel-rt":"4.12.14-10.157.1","kernel-source-rt":"4.12.14-10.157.1","dlm-kmp-rt":"4.12.14-10.157.1","kernel-syms-rt":"4.12.14-10.157.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0118-1.json"}},{"package":{"name":"kernel-syms-rt","ecosystem":"SUSE:Linux Enterprise Real Time 12 SP5","purl":"pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-10.157.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-rt-devel":"4.12.14-10.157.1","gfs2-kmp-rt":"4.12.14-10.157.1","ocfs2-kmp-rt":"4.12.14-10.157.1","kernel-rt_debug":"4.12.14-10.157.1","kernel-rt_debug-devel":"4.12.14-10.157.1","cluster-md-kmp-rt":"4.12.14-10.157.1","kernel-devel-rt":"4.12.14-10.157.1","kernel-rt-base":"4.12.14-10.157.1","kernel-rt":"4.12.14-10.157.1","kernel-source-rt":"4.12.14-10.157.1","dlm-kmp-rt":"4.12.14-10.157.1","kernel-syms-rt":"4.12.14-10.157.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0118-1.json"}}],"schema_version":"1.7.3"}