{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"important"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"text":"Copyright 2023 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"Security update for the Linux Kernel","title":"Title of the patch"},{"category":"description","text":"\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity() that could cause memory corruption (bsc#1208600).\n- CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115).\n- CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).\n- CVE-2023-20588: Fixed a potential data leak that could be triggered through a side channel when division by zero occurred on some AMD processors (bsc#1213927).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in the vmxnet3 driver that may have allowed a local attacker with user privileges to cause a denial of service (bsc#1214451).\n- CVE-2023-3772: Fixed a flaw in the XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to denial of service (bsc#1213666).\n- CVE-2023-2007: Removed the dpt_i2o driver due to security issues (bsc#1210448, jsc#PED-4579).\n- CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check (bsc#1214348).\n","title":"Description of the patch"},{"category":"details","text":"SUSE-2023-4028,SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2023-4028","title":"Patchnames"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"self","summary":"URL for SUSE-SU-2023:4028-1","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234028-1/"},{"category":"external","summary":"SUSE ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"self","summary":"URL of this CSAF notice","url":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_4028-1.json"},{"category":"self","summary":"E-Mail link for SUSE-SU-2023:4028-1","url":"https://lists.suse.com/pipermail/sle-security-updates/2023-October/016622.html"},{"category":"self","summary":"SUSE Bug 1208600","url":"https://bugzilla.suse.com/1208600"},{"category":"self","summary":"SUSE Bug 1208995","url":"https://bugzilla.suse.com/1208995"},{"category":"self","summary":"SUSE Bug 1210448","url":"https://bugzilla.suse.com/1210448"},{"category":"self","summary":"SUSE Bug 1213666","url":"https://bugzilla.suse.com/1213666"},{"category":"self","summary":"SUSE Bug 1213927","url":"https://bugzilla.suse.com/1213927"},{"category":"self","summary":"SUSE Bug 1214348","url":"https://bugzilla.suse.com/1214348"},{"category":"self","summary":"SUSE Bug 1214451","url":"https://bugzilla.suse.com/1214451"},{"category":"self","summary":"SUSE Bug 1215115","url":"https://bugzilla.suse.com/1215115"},{"category":"self","summary":"SUSE CVE CVE-2023-1077 page","url":"https://www.suse.com/security/cve/CVE-2023-1077/"},{"category":"self","summary":"SUSE CVE CVE-2023-1192 page","url":"https://www.suse.com/security/cve/CVE-2023-1192/"},{"category":"self","summary":"SUSE CVE CVE-2023-2007 page","url":"https://www.suse.com/security/cve/CVE-2023-2007/"},{"category":"self","summary":"SUSE CVE CVE-2023-20588 page","url":"https://www.suse.com/security/cve/CVE-2023-20588/"},{"category":"self","summary":"SUSE CVE CVE-2023-3772 page","url":"https://www.suse.com/security/cve/CVE-2023-3772/"},{"category":"self","summary":"SUSE CVE CVE-2023-4385 page","url":"https://www.suse.com/security/cve/CVE-2023-4385/"},{"category":"self","summary":"SUSE CVE CVE-2023-4459 page","url":"https://www.suse.com/security/cve/CVE-2023-4459/"},{"category":"self","summary":"SUSE CVE CVE-2023-4623 page","url":"https://www.suse.com/security/cve/CVE-2023-4623/"}],"title":"Security update for the Linux Kernel","tracking":{"current_release_date":"2023-10-10T12:06:24Z","generator":{"date":"2023-10-10T12:06:24Z","engine":{"name":"cve-database.git:bin/generate-csaf.pl","version":"1"}},"id":"SUSE-SU-2023:4028-1","initial_release_date":"2023-10-10T12:06:24Z","revision_history":[{"date":"2023-10-10T12:06:24Z","number":"1","summary":"Current version"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version","name":"kernel-debug-3.0.101-108.147.1.i586","product":{"name":"kernel-debug-3.0.101-108.147.1.i586","product_id":"kernel-debug-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-debug-base-3.0.101-108.147.1.i586","product":{"name":"kernel-debug-base-3.0.101-108.147.1.i586","product_id":"kernel-debug-base-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-debug-devel-3.0.101-108.147.1.i586","product":{"name":"kernel-debug-devel-3.0.101-108.147.1.i586","product_id":"kernel-debug-devel-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-debug-extra-3.0.101-108.147.1.i586","product":{"name":"kernel-debug-extra-3.0.101-108.147.1.i586","product_id":"kernel-debug-extra-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-debug-hmac-3.0.101-108.147.1.i586","product":{"name":"kernel-debug-hmac-3.0.101-108.147.1.i586","product_id":"kernel-debug-hmac-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-default-3.0.101-108.147.1.i586","product":{"name":"kernel-default-3.0.101-108.147.1.i586","product_id":"kernel-default-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-default-base-3.0.101-108.147.1.i586","product":{"name":"kernel-default-base-3.0.101-108.147.1.i586","product_id":"kernel-default-base-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-default-devel-3.0.101-108.147.1.i586","product":{"name":"kernel-default-devel-3.0.101-108.147.1.i586","product_id":"kernel-default-devel-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-default-extra-3.0.101-108.147.1.i586","product":{"name":"kernel-default-extra-3.0.101-108.147.1.i586","product_id":"kernel-default-extra-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-default-hmac-3.0.101-108.147.1.i586","product":{"name":"kernel-default-hmac-3.0.101-108.147.1.i586","product_id":"kernel-default-hmac-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-ec2-3.0.101-108.147.1.i586","product":{"name":"kernel-ec2-3.0.101-108.147.1.i586","product_id":"kernel-ec2-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-ec2-base-3.0.101-108.147.1.i586","product":{"name":"kernel-ec2-base-3.0.101-108.147.1.i586","product_id":"kernel-ec2-base-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-ec2-devel-3.0.101-108.147.1.i586","product":{"name":"kernel-ec2-devel-3.0.101-108.147.1.i586","product_id":"kernel-ec2-devel-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-ec2-extra-3.0.101-108.147.1.i586","product":{"name":"kernel-ec2-extra-3.0.101-108.147.1.i586","product_id":"kernel-ec2-extra-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-ec2-hmac-3.0.101-108.147.1.i586","product":{"name":"kernel-ec2-hmac-3.0.101-108.147.1.i586","product_id":"kernel-ec2-hmac-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-pae-3.0.101-108.147.1.i586","product":{"name":"kernel-pae-3.0.101-108.147.1.i586","product_id":"kernel-pae-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-pae-base-3.0.101-108.147.1.i586","product":{"name":"kernel-pae-base-3.0.101-108.147.1.i586","product_id":"kernel-pae-base-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-pae-devel-3.0.101-108.147.1.i586","product":{"name":"kernel-pae-devel-3.0.101-108.147.1.i586","product_id":"kernel-pae-devel-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-pae-extra-3.0.101-108.147.1.i586","product":{"name":"kernel-pae-extra-3.0.101-108.147.1.i586","product_id":"kernel-pae-extra-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-pae-hmac-3.0.101-108.147.1.i586","product":{"name":"kernel-pae-hmac-3.0.101-108.147.1.i586","product_id":"kernel-pae-hmac-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-source-3.0.101-108.147.1.i586","product":{"name":"kernel-source-3.0.101-108.147.1.i586","product_id":"kernel-source-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-source-vanilla-3.0.101-108.147.1.i586","product":{"name":"kernel-source-vanilla-3.0.101-108.147.1.i586","product_id":"kernel-source-vanilla-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-syms-3.0.101-108.147.1.i586","product":{"name":"kernel-syms-3.0.101-108.147.1.i586","product_id":"kernel-syms-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-trace-3.0.101-108.147.1.i586","product":{"name":"kernel-trace-3.0.101-108.147.1.i586","product_id":"kernel-trace-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-trace-base-3.0.101-108.147.1.i586","product":{"name":"kernel-trace-base-3.0.101-108.147.1.i586","product_id":"kernel-trace-base-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-trace-devel-3.0.101-108.147.1.i586","product":{"name":"kernel-trace-devel-3.0.101-108.147.1.i586","product_id":"kernel-trace-devel-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-trace-extra-3.0.101-108.147.1.i586","product":{"name":"kernel-trace-extra-3.0.101-108.147.1.i586","product_id":"kernel-trace-extra-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-trace-hmac-3.0.101-108.147.1.i586","product":{"name":"kernel-trace-hmac-3.0.101-108.147.1.i586","product_id":"kernel-trace-hmac-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-vanilla-3.0.101-108.147.1.i586","product":{"name":"kernel-vanilla-3.0.101-108.147.1.i586","product_id":"kernel-vanilla-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-vanilla-base-3.0.101-108.147.1.i586","product":{"name":"kernel-vanilla-base-3.0.101-108.147.1.i586","product_id":"kernel-vanilla-base-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-vanilla-devel-3.0.101-108.147.1.i586","product":{"name":"kernel-vanilla-devel-3.0.101-108.147.1.i586","product_id":"kernel-vanilla-devel-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-vanilla-hmac-3.0.101-108.147.1.i586","product":{"name":"kernel-vanilla-hmac-3.0.101-108.147.1.i586","product_id":"kernel-vanilla-hmac-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-xen-3.0.101-108.147.1.i586","product":{"name":"kernel-xen-3.0.101-108.147.1.i586","product_id":"kernel-xen-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-xen-base-3.0.101-108.147.1.i586","product":{"name":"kernel-xen-base-3.0.101-108.147.1.i586","product_id":"kernel-xen-base-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-xen-devel-3.0.101-108.147.1.i586","product":{"name":"kernel-xen-devel-3.0.101-108.147.1.i586","product_id":"kernel-xen-devel-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-xen-extra-3.0.101-108.147.1.i586","product":{"name":"kernel-xen-extra-3.0.101-108.147.1.i586","product_id":"kernel-xen-extra-3.0.101-108.147.1.i586"}},{"category":"product_version","name":"kernel-xen-hmac-3.0.101-108.147.1.i586","product":{"name":"kernel-xen-hmac-3.0.101-108.147.1.i586","product_id":"kernel-xen-hmac-3.0.101-108.147.1.i586"}}],"category":"architecture","name":"i586"},{"branches":[{"category":"product_version","name":"kernel-source-3.0.101-108.147.1.ia64","product":{"name":"kernel-source-3.0.101-108.147.1.ia64","product_id":"kernel-source-3.0.101-108.147.1.ia64"}},{"category":"product_version","name":"kernel-source-vanilla-3.0.101-108.147.1.ia64","product":{"name":"kernel-source-vanilla-3.0.101-108.147.1.ia64","product_id":"kernel-source-vanilla-3.0.101-108.147.1.ia64"}}],"category":"architecture","name":"ia64"},{"branches":[{"category":"product_version","name":"kernel-docs-3.0.101-108.147.1.noarch","product":{"name":"kernel-docs-3.0.101-108.147.1.noarch","product_id":"kernel-docs-3.0.101-108.147.1.noarch"}}],"category":"architecture","name":"noarch"},{"branches":[{"category":"product_version","name":"kernel-source-3.0.101-108.147.1.ppc","product":{"name":"kernel-source-3.0.101-108.147.1.ppc","product_id":"kernel-source-3.0.101-108.147.1.ppc"}},{"category":"product_version","name":"kernel-source-vanilla-3.0.101-108.147.1.ppc","product":{"name":"kernel-source-vanilla-3.0.101-108.147.1.ppc","product_id":"kernel-source-vanilla-3.0.101-108.147.1.ppc"}}],"category":"architecture","name":"ppc"},{"branches":[{"category":"product_version","name":"kernel-source-3.0.101-108.147.1.ppc64","product":{"name":"kernel-source-3.0.101-108.147.1.ppc64","product_id":"kernel-source-3.0.101-108.147.1.ppc64"}},{"category":"product_version","name":"kernel-source-vanilla-3.0.101-108.147.1.ppc64","product":{"name":"kernel-source-vanilla-3.0.101-108.147.1.ppc64","product_id":"kernel-source-vanilla-3.0.101-108.147.1.ppc64"}}],"category":"architecture","name":"ppc64"},{"branches":[{"category":"product_version","name":"kernel-source-3.0.101-108.147.1.s390","product":{"name":"kernel-source-3.0.101-108.147.1.s390","product_id":"kernel-source-3.0.101-108.147.1.s390"}},{"category":"product_version","name":"kernel-source-vanilla-3.0.101-108.147.1.s390","product":{"name":"kernel-source-vanilla-3.0.101-108.147.1.s390","product_id":"kernel-source-vanilla-3.0.101-108.147.1.s390"}}],"category":"architecture","name":"s390"},{"branches":[{"category":"product_version","name":"kernel-source-3.0.101-108.147.1.s390x","product":{"name":"kernel-source-3.0.101-108.147.1.s390x","product_id":"kernel-source-3.0.101-108.147.1.s390x"}},{"category":"product_version","name":"kernel-source-vanilla-3.0.101-108.147.1.s390x","product":{"name":"kernel-source-vanilla-3.0.101-108.147.1.s390x","product_id":"kernel-source-vanilla-3.0.101-108.147.1.s390x"}}],"category":"architecture","name":"s390x"},{"branches":[{"category":"product_version","name":"kernel-debug-3.0.101-108.147.1.x86_64","product":{"name":"kernel-debug-3.0.101-108.147.1.x86_64","product_id":"kernel-debug-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-debug-base-3.0.101-108.147.1.x86_64","product":{"name":"kernel-debug-base-3.0.101-108.147.1.x86_64","product_id":"kernel-debug-base-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-debug-devel-3.0.101-108.147.1.x86_64","product":{"name":"kernel-debug-devel-3.0.101-108.147.1.x86_64","product_id":"kernel-debug-devel-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-debug-extra-3.0.101-108.147.1.x86_64","product":{"name":"kernel-debug-extra-3.0.101-108.147.1.x86_64","product_id":"kernel-debug-extra-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-debug-hmac-3.0.101-108.147.1.x86_64","product":{"name":"kernel-debug-hmac-3.0.101-108.147.1.x86_64","product_id":"kernel-debug-hmac-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-default-3.0.101-108.147.1.x86_64","product":{"name":"kernel-default-3.0.101-108.147.1.x86_64","product_id":"kernel-default-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-default-base-3.0.101-108.147.1.x86_64","product":{"name":"kernel-default-base-3.0.101-108.147.1.x86_64","product_id":"kernel-default-base-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-default-devel-3.0.101-108.147.1.x86_64","product":{"name":"kernel-default-devel-3.0.101-108.147.1.x86_64","product_id":"kernel-default-devel-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-default-extra-3.0.101-108.147.1.x86_64","product":{"name":"kernel-default-extra-3.0.101-108.147.1.x86_64","product_id":"kernel-default-extra-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-default-hmac-3.0.101-108.147.1.x86_64","product":{"name":"kernel-default-hmac-3.0.101-108.147.1.x86_64","product_id":"kernel-default-hmac-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-ec2-3.0.101-108.147.1.x86_64","product":{"name":"kernel-ec2-3.0.101-108.147.1.x86_64","product_id":"kernel-ec2-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-ec2-base-3.0.101-108.147.1.x86_64","product":{"name":"kernel-ec2-base-3.0.101-108.147.1.x86_64","product_id":"kernel-ec2-base-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-ec2-devel-3.0.101-108.147.1.x86_64","product":{"name":"kernel-ec2-devel-3.0.101-108.147.1.x86_64","product_id":"kernel-ec2-devel-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-ec2-extra-3.0.101-108.147.1.x86_64","product":{"name":"kernel-ec2-extra-3.0.101-108.147.1.x86_64","product_id":"kernel-ec2-extra-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-ec2-hmac-3.0.101-108.147.1.x86_64","product":{"name":"kernel-ec2-hmac-3.0.101-108.147.1.x86_64","product_id":"kernel-ec2-hmac-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-source-3.0.101-108.147.1.x86_64","product":{"name":"kernel-source-3.0.101-108.147.1.x86_64","product_id":"kernel-source-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-source-vanilla-3.0.101-108.147.1.x86_64","product":{"name":"kernel-source-vanilla-3.0.101-108.147.1.x86_64","product_id":"kernel-source-vanilla-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-syms-3.0.101-108.147.1.x86_64","product":{"name":"kernel-syms-3.0.101-108.147.1.x86_64","product_id":"kernel-syms-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-trace-3.0.101-108.147.1.x86_64","product":{"name":"kernel-trace-3.0.101-108.147.1.x86_64","product_id":"kernel-trace-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-trace-base-3.0.101-108.147.1.x86_64","product":{"name":"kernel-trace-base-3.0.101-108.147.1.x86_64","product_id":"kernel-trace-base-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-trace-devel-3.0.101-108.147.1.x86_64","product":{"name":"kernel-trace-devel-3.0.101-108.147.1.x86_64","product_id":"kernel-trace-devel-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-trace-extra-3.0.101-108.147.1.x86_64","product":{"name":"kernel-trace-extra-3.0.101-108.147.1.x86_64","product_id":"kernel-trace-extra-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-trace-hmac-3.0.101-108.147.1.x86_64","product":{"name":"kernel-trace-hmac-3.0.101-108.147.1.x86_64","product_id":"kernel-trace-hmac-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-vanilla-3.0.101-108.147.1.x86_64","product":{"name":"kernel-vanilla-3.0.101-108.147.1.x86_64","product_id":"kernel-vanilla-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-vanilla-base-3.0.101-108.147.1.x86_64","product":{"name":"kernel-vanilla-base-3.0.101-108.147.1.x86_64","product_id":"kernel-vanilla-base-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-vanilla-devel-3.0.101-108.147.1.x86_64","product":{"name":"kernel-vanilla-devel-3.0.101-108.147.1.x86_64","product_id":"kernel-vanilla-devel-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-vanilla-hmac-3.0.101-108.147.1.x86_64","product":{"name":"kernel-vanilla-hmac-3.0.101-108.147.1.x86_64","product_id":"kernel-vanilla-hmac-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-xen-3.0.101-108.147.1.x86_64","product":{"name":"kernel-xen-3.0.101-108.147.1.x86_64","product_id":"kernel-xen-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-xen-base-3.0.101-108.147.1.x86_64","product":{"name":"kernel-xen-base-3.0.101-108.147.1.x86_64","product_id":"kernel-xen-base-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-xen-devel-3.0.101-108.147.1.x86_64","product":{"name":"kernel-xen-devel-3.0.101-108.147.1.x86_64","product_id":"kernel-xen-devel-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-xen-extra-3.0.101-108.147.1.x86_64","product":{"name":"kernel-xen-extra-3.0.101-108.147.1.x86_64","product_id":"kernel-xen-extra-3.0.101-108.147.1.x86_64"}},{"category":"product_version","name":"kernel-xen-hmac-3.0.101-108.147.1.x86_64","product":{"name":"kernel-xen-hmac-3.0.101-108.147.1.x86_64","product_id":"kernel-xen-hmac-3.0.101-108.147.1.x86_64"}}],"category":"architecture","name":"x86_64"},{"branches":[{"category":"product_name","name":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product":{"name":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"kernel-default-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-default-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-default-base-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-default-base-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-default-devel-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-default-devel-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-ec2-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-ec2-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-ec2-base-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-ec2-base-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-ec2-devel-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-ec2-devel-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-source-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-source-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-syms-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-syms-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-trace-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-trace-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-trace-base-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-trace-base-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-trace-devel-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-trace-devel-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-xen-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-xen-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-xen-base-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-xen-base-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"},{"category":"default_component_of","full_product_name":{"name":"kernel-xen-devel-3.0.101-108.147.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE","product_id":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"},"product_reference":"kernel-xen-devel-3.0.101-108.147.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE"}]},"vulnerabilities":[{"cve":"CVE-2023-1077","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2023-1077"}],"notes":[{"category":"general","text":"In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2023-1077","url":"https://www.suse.com/security/cve/CVE-2023-1077"},{"category":"external","summary":"SUSE Bug 1208600 for CVE-2023-1077","url":"https://bugzilla.suse.com/1208600"},{"category":"external","summary":"SUSE Bug 1208839 for CVE-2023-1077","url":"https://bugzilla.suse.com/1208839"},{"category":"external","summary":"SUSE Bug 1213841 for CVE-2023-1077","url":"https://bugzilla.suse.com/1213841"},{"category":"external","summary":"SUSE Bug 1213842 for CVE-2023-1077","url":"https://bugzilla.suse.com/1213842"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"threats":[{"category":"impact","date":"2023-10-10T12:06:24Z","details":"important"}],"title":"CVE-2023-1077"},{"cve":"CVE-2023-1192","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2023-1192"}],"notes":[{"category":"general","text":"** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2023-1192","url":"https://www.suse.com/security/cve/CVE-2023-1192"},{"category":"external","summary":"SUSE Bug 1208995 for CVE-2023-1192","url":"https://bugzilla.suse.com/1208995"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"threats":[{"category":"impact","date":"2023-10-10T12:06:24Z","details":"moderate"}],"title":"CVE-2023-1192"},{"cve":"CVE-2023-2007","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2023-2007"}],"notes":[{"category":"general","text":"The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2023-2007","url":"https://www.suse.com/security/cve/CVE-2023-2007"},{"category":"external","summary":"SUSE Bug 1210448 for CVE-2023-2007","url":"https://bugzilla.suse.com/1210448"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":4.4,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"products":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"threats":[{"category":"impact","date":"2023-10-10T12:06:24Z","details":"moderate"}],"title":"CVE-2023-2007"},{"cve":"CVE-2023-20588","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2023-20588"}],"notes":[{"category":"general","text":"\nA division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. \n\n\n\n\n\n\n\n","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2023-20588","url":"https://www.suse.com/security/cve/CVE-2023-20588"},{"category":"external","summary":"SUSE Bug 1213927 for CVE-2023-20588","url":"https://bugzilla.suse.com/1213927"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"products":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"threats":[{"category":"impact","date":"2023-10-10T12:06:24Z","details":"moderate"}],"title":"CVE-2023-20588"},{"cve":"CVE-2023-3772","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2023-3772"}],"notes":[{"category":"general","text":"A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2023-3772","url":"https://www.suse.com/security/cve/CVE-2023-3772"},{"category":"external","summary":"SUSE Bug 1213666 for CVE-2023-3772","url":"https://bugzilla.suse.com/1213666"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":5.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"threats":[{"category":"impact","date":"2023-10-10T12:06:24Z","details":"moderate"}],"title":"CVE-2023-3772"},{"cve":"CVE-2023-4385","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2023-4385"}],"notes":[{"category":"general","text":"A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2023-4385","url":"https://www.suse.com/security/cve/CVE-2023-4385"},{"category":"external","summary":"SUSE Bug 1214348 for CVE-2023-4385","url":"https://bugzilla.suse.com/1214348"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":5.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"threats":[{"category":"impact","date":"2023-10-10T12:06:24Z","details":"moderate"}],"title":"CVE-2023-4385"},{"cve":"CVE-2023-4459","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2023-4459"}],"notes":[{"category":"general","text":"A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2023-4459","url":"https://www.suse.com/security/cve/CVE-2023-4459"},{"category":"external","summary":"SUSE Bug 1214451 for CVE-2023-4459","url":"https://bugzilla.suse.com/1214451"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"threats":[{"category":"impact","date":"2023-10-10T12:06:24Z","details":"moderate"}],"title":"CVE-2023-4459"},{"cve":"CVE-2023-4623","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2023-4623"}],"notes":[{"category":"general","text":"A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.\n\nIf a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.\n\nWe recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.\n\n","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2023-4623","url":"https://www.suse.com/security/cve/CVE-2023-4623"},{"category":"external","summary":"SUSE Bug 1215115 for CVE-2023-4623","url":"https://bugzilla.suse.com/1215115"},{"category":"external","summary":"SUSE Bug 1215440 for CVE-2023-4623","url":"https://bugzilla.suse.com/1215440"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-default-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-ec2-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-source-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-syms-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-trace-devel-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-base-3.0.101-108.147.1.x86_64","SUSE Linux Enterprise Server 11 SP4-LTSS-EXTREME-CORE:kernel-xen-devel-3.0.101-108.147.1.x86_64"]}],"threats":[{"category":"impact","date":"2023-10-10T12:06:24Z","details":"important"}],"title":"CVE-2023-4623"}]}