SUSE update for the Linux Kernel

Published: 2024-01-17

Risk	Medium
Patch available	YES
Number of vulnerabilities	13
CVE-ID	CVE-2020-26555 CVE-2022-45887 CVE-2023-1206 CVE-2023-31085 CVE-2023-3111 CVE-2023-39189 CVE-2023-39192 CVE-2023-39193 CVE-2023-39197 CVE-2023-45863 CVE-2023-51779 CVE-2023-6606 CVE-2023-6932
CWE-ID	CWE-284 CWE-362 CWE-400 CWE-369 CWE-416 CWE-125 CWE-787
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE Operating systems & Components / Operating system SUSE Linux Enterprise Server 11 Operating systems & Components / Operating system kernel-trace-base Operating systems & Components / Operating system package or component kernel-syms Operating systems & Components / Operating system package or component kernel-trace-devel Operating systems & Components / Operating system package or component kernel-default-base Operating systems & Components / Operating system package or component kernel-xen-devel Operating systems & Components / Operating system package or component kernel-ec2-base Operating systems & Components / Operating system package or component kernel-default-devel Operating systems & Components / Operating system package or component kernel-ec2-devel Operating systems & Components / Operating system package or component kernel-source Operating systems & Components / Operating system package or component kernel-xen-base Operating systems & Components / Operating system package or component kernel-xen Operating systems & Components / Operating system package or component kernel-trace Operating systems & Components / Operating system package or component kernel-default Operating systems & Components / Operating system package or component kernel-ec2 Operating systems & Components / Operating system package or component
Vendor	SUSE

Security Bulletin

This security bulletin contains information about 13 vulnerabilities.

1) Improper access control

EUVDB-ID: #VU53578

Risk: Low

CVSSv3.1: 3.8 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-26555

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a local attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions within the Bluetooth legacy BR/EDR PIN code pairing. An attacker with physical access can spoof the BD_ADDR of the peer device and complete pairing without knowledge of the PIN.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Race condition

EUVDB-ID: #VU75338

Risk: Low

CVSSv3.1: 4.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-45887

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a race condition in drivers/media/usb/ttusb-dec/ttusb_dec.c in Linux kernel. A local user can exploit the race and crash the kernel.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Resource exhaustion

EUVDB-ID: #VU77953

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-1206

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a hash collision flaw in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when an attacker makes a new kind of SYN flood attack. A remote attacker can increase the CPU usage of the server that accepts IPV6 connections up to 95%.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Division by zero

EUVDB-ID: #VU82660

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-31085

CWE-ID: CWE-369 - Divide By Zero

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a divide by zero error within the drivers/mtd/ubi/cdev.c driver. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Use-after-free

EUVDB-ID: #VU77911

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-3111

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the prepare_to_relocate() function in fs/btrfs/relocation.c in btrfs in the Linux Kernel. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Out-of-bounds read

EUVDB-ID: #VU82659

Risk: Low

CVSSv3.1: 5.8 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-39189

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary condition within the nfnl_osf_add_callback() function in Linux kernel Netfilter. A local user with CAP_NET_ADMIN capability can trigger an out-of-bounds read error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Out-of-bounds read

EUVDB-ID: #VU81921

Risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-39192

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a boundary condition within the the u32_match_it() function in Netfilter subsystem in Linux kernel. A local user can trigger an out-of-bounds read error and gain access to sensitive information.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Out-of-bounds read

EUVDB-ID: #VU81920

Risk: Low

CVSSv3.1: 2 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-39193

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the sctp_mt_check() function in Netfilter subsystem in Linux kernel. A local user with CAP_NET_ADMIN capability can trigger an out-of-bounds read error and read contents of memory on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Out-of-bounds read

EUVDB-ID: #VU84353

Risk: Medium

CVSSv3.1: 5.1 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-39197

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the Netfilter Connection Tracking (conntrack) in the Linux kernel in the nf_conntrack_dccp_packet() function in net/netfilter/nf_conntrack_proto_dccp.c. A remote attacker can send specially crafted DCCP packets to the system, trigger an out-of-bounds read error and read contents of memory on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Out-of-bounds write

EUVDB-ID: #VU84354

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-45863

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the fill_kobj_path() function in lib/kobject.c. A local user can can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Use-after-free

EUVDB-ID: #VU85023

Risk: Low

CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-51779

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error when handling bt_sock_ioctl in the Bluetooth subsystem. A local user can trigger a use-after-free error and execute arbitrary code on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Out-of-bounds read

EUVDB-ID: #VU85442

Risk: Low

CVSSv3.1: 6.2 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-6606

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a boundary condition within the smbCalcSize() function in fs/smb/client/netmisc.c file. A local user can trigger an out-of-bounds read error and gain access to sensitive information or crash the kernel.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Use-after-free

EUVDB-ID: #VU84585

Risk: Low

CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-6932

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local authenticated user to execute arbitrary code.

The vulnerability exists due to a use-after-free error within the ipv4 igmp component in Linux kernel. A local authenticated user can trigger a use-after-free error and execute arbitrary code.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE: 11-SP4

SUSE Linux Enterprise Server 11: SP4

kernel-trace-base: before 3.0.101-108.150.1

kernel-syms: before 3.0.101-108.150.1

kernel-trace-devel: before 3.0.101-108.150.1

kernel-default-base: before 3.0.101-108.150.1

kernel-xen-devel: before 3.0.101-108.150.1

kernel-ec2-base: before 3.0.101-108.150.1

kernel-default-devel: before 3.0.101-108.150.1

kernel-ec2-devel: before 3.0.101-108.150.1

kernel-source: before 3.0.101-108.150.1

kernel-xen-base: before 3.0.101-108.150.1

kernel-xen: before 3.0.101-108.150.1

kernel-trace: before 3.0.101-108.150.1

kernel-default: before 3.0.101-108.150.1

kernel-ec2: before 3.0.101-108.150.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20240112-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.