|
|
Log in / Subscribe / Register

SUSE alert SUSE-SU-2023:2232-1 (kernel)



From:
              sle-security-updates@lists.suse.com


To:
              sle-security-updates@lists.suse.com


Subject:
              SUSE-SU-2023:2232-1: important: Security update for the Linux Kernel


Date:
              Wed, 17 May 2023 16:30:17 -0000


Message-ID:
              <168434101716.453.4530875024753128796@smelt2.suse.de>




# Security update for the Linux Kernel

Announcement ID: SUSE-SU-2023:2232-1  
Rating: important  
References:

  * #1076830
  * #1194535
  * #1202353
  * #1205128
  * #1207036
  * #1207125
  * #1207168
  * #1207185
  * #1207795
  * #1207845
  * #1208179
  * #1208333
  * #1208599
  * #1208777
  * #1208837
  * #1208850
  * #1209008
  * #1209052
  * #1209256
  * #1209289
  * #1209291
  * #1209532
  * #1209547
  * #1209549
  * #1209613
  * #1209687
  * #1209777
  * #1209778
  * #1209845
  * #1209871
  * #1209887
  * #1210124
  * #1210202
  * #1210301
  * #1210329
  * #1210336
  * #1210337
  * #1210469
  * #1210498
  * #1210506
  * #1210647
  * #1211037

  
Cross-References:

  * CVE-2017-5753
  * CVE-2020-36691
  * CVE-2021-3923
  * CVE-2021-4203
  * CVE-2022-20567
  * CVE-2022-43945
  * CVE-2023-0590
  * CVE-2023-0597
  * CVE-2023-1076
  * CVE-2023-1095
  * CVE-2023-1118
  * CVE-2023-1390
  * CVE-2023-1513
  * CVE-2023-1611
  * CVE-2023-1670
  * CVE-2023-1855
  * CVE-2023-1989
  * CVE-2023-1990
  * CVE-2023-1998
  * CVE-2023-2124
  * CVE-2023-2162
  * CVE-2023-23454
  * CVE-2023-23455
  * CVE-2023-2483
  * CVE-2023-28328
  * CVE-2023-28464
  * CVE-2023-28772
  * CVE-2023-30772

  
CVSS scores:

  * CVE-2017-5753 ( SUSE ):  5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
  * CVE-2017-5753 ( SUSE ):  7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
  * CVE-2017-5753 ( NVD ):  5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
  * CVE-2017-5753 ( NVD ):  5.6 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
  * CVE-2020-36691 ( SUSE ):  5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2020-36691 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2021-3923 ( SUSE ):  3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  * CVE-2021-3923 ( NVD ):  2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
  * CVE-2021-4203 ( SUSE ):  5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L
  * CVE-2021-4203 ( NVD ):  6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
  * CVE-2022-20567 ( SUSE ):  6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-20567 ( NVD ):  6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-43945 ( SUSE ):  8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-43945 ( NVD ):  7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-0590 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-0590 ( NVD ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-0597 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  * CVE-2023-0597 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  * CVE-2023-1076 ( SUSE ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
  * CVE-2023-1076 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
  * CVE-2023-1095 ( SUSE ):  5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-1095 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-1118 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-1118 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-1390 ( SUSE ):  7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-1390 ( NVD ):  7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-1513 ( SUSE ):  3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
  * CVE-2023-1513 ( NVD ):  3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  * CVE-2023-1611 ( SUSE ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-1611 ( NVD ):  6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
  * CVE-2023-1670 ( SUSE ):  4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
  * CVE-2023-1670 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-1855 ( SUSE ):  6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-1855 ( NVD ):  6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
  * CVE-2023-1989 ( SUSE ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-1989 ( NVD ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-1990 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-1990 ( NVD ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-1998 ( SUSE ):  5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
  * CVE-2023-1998 ( NVD ):  5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
  * CVE-2023-2124 ( SUSE ):  6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-2162 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-2162 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  * CVE-2023-23454 ( SUSE ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-23454 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-23455 ( SUSE ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-23455 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-2483 ( SUSE ):  6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-28328 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-28328 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-28464 ( SUSE ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-28464 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-28772 ( SUSE ):  7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-28772 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-30772 ( SUSE ):  6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-30772 ( NVD ):  6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  
Affected Products:

  * SUSE Linux Enterprise High Availability Extension 12 SP4
  * SUSE Linux Enterprise High Performance Computing 12 SP4
  * SUSE Linux Enterprise Live Patching 12-SP4
  * SUSE Linux Enterprise Server 12 SP4
  * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4
  * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4
  * SUSE Linux Enterprise Server for SAP Applications 12 SP4
  * SUSE OpenStack Cloud 9
  * SUSE OpenStack Cloud Crowbar 9

  
  
An update that solves 28 vulnerabilities and has 14 fixes can now be installed.

## Description:

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security
and bugfixes.

The following security bugs were fixed:

  * CVE-2023-2483: Fixed a use after free bug in emac_remove due caused by a
    race condition (bsc#1211037).
  * CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could
    have lead to denial-of-service or potentially privilege escalation
    (bsc#1210498).
  * CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet
    driver. A local user could use this flaw to crash the system or potentially
    escalate their privileges on the system (bsc#1209871).
  * CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
  * CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
  * CVE-2020-36691: Fixed a denial of service (unbounded recursion)
    vulnerability via a nested Netlink policy with a back reference (bsc#1209613
    bsc#1209777).
  * CVE-2021-3923: Fixed stack information leak vulnerability that could lead to
    kernel protection bypass in infiniband RDMA (bsc#1209778).
  * CVE-2021-4203: Fixed use-after-free read flaw that was found in
    sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS
    race with listen() (bsc#1194535).
  * CVE-2022-20567: Fixed use after free that could lead to a local privilege
    escalation in pppol2tp_create of l2tp_ppp.c (bsc#1208850).
  * CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation
    (bsc#1205128).
  * CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
  * CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm
    (bsc#1207845).
  * CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets
    (bsc#1208599).
  * CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed
    list head (bsc#1208777).
  * CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in
    media/rc (bsc#1208837).
  * CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit()
    (bsc#1209289).
  * CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs
    structure that could be copied to userspace, causing an information leak
    (bsc#1209532).
  * CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot
    (bsc#1209687).
  * CVE-2023-1855: Fixed an use-after-free flaw in xgene_hwmon_remove
    (bsc#1210202).
  * CVE-2023-1989: Fixed an use-after-free flaw in btsdio_remove (bsc#1210336).
  * CVE-2023-1990: Fixed an use-after-free flaw in ndlc_remove (bsc#1210337).
  * CVE-2023-1998: Fixed an use-after-free flaw during login when accessing the
    shost ipaddress (bsc#1210506).
  * CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create
    (bsc#1210647).
  * CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler
    (bsc#1207036).
  * CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in
    net/sched/sch_atm.c because of type confusion (non-negative numbers can
    sometimes indicate a TC_ACT_SHOT condition rather than valid classification
    results) (bsc#1207125).
  * CVE-2023-28328: Fixed a denial of service issue in az6027 driver in
    drivers/media/usb/dev-usb/az6027.c (bsc#1209291).
  * CVE-2023-28464: Fixed user-after-free that could lead to privilege
    escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1209052).
  * CVE-2023-28772: Fixed buffer overflow in seq_buf_putmem_hex in lib/seq_buf.c
    (bsc#1209549).
  * CVE-2023-30772: Fixed race condition and resultant use-after-free in
    da9150_charger_remove (bsc#1210329).

The following non-security bugs were fixed:

  * Do not sign the vanilla kernel (bsc#1209008).
  * Fix kABI breakage (bsc#1208333)
  * PCI: hv: Add a per-bus mutex state_lock (bsc#1207185).
  * PCI: hv: Fix a race condition bug in hv_pci_query_relations() (bsc#1207185).
  * PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic
    (bsc#1207185).
  * PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
    (bsc#1207185).
  * Remove obsolete KMP obsoletes (bsc#1210469).
  * Replace mkinitrd dependency with dracut (bsc#1202353).
  * cifs: fix double free in dfs mounts (bsc#1209845).
  * cifs: fix negotiate context parsing (bsc#1210301).
  * cifs: handle reconnect of tcon when there is no cached dfs referral
    (bsc#1209845).
  * cifs: missing null pointer check in cifs_mount (bsc#1209845).
  * cifs: serialize all mount attempts (bsc#1209845).
  * cred: allow get_cred() and put_cred() to be given NULL (bsc#1209887).
  * ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
    (bsc#1207168).
  * k-m-s: Drop Linux 2.6 support
  * kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179).

## Special Instructions and Notes:

  * Please reboot the system after installing this update.

## Patch Instructions:

To install this SUSE Important update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE OpenStack Cloud 9  
    zypper in -t patch SUSE-OpenStack-Cloud-9-2023-2232=1

  * SUSE OpenStack Cloud Crowbar 9  
    zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2023-2232=1

  * SUSE Linux Enterprise Server for SAP Applications 12 SP4  
    zypper in -t patch SUSE-SLE-HA-12-SP4-2023-2232=1 SUSE-SLE-
SAP-12-SP4-2023-2232=1

  * SUSE Linux Enterprise High Availability Extension 12 SP4  
    zypper in -t patch SUSE-SLE-HA-12-SP4-2023-2232=1

  * SUSE Linux Enterprise Live Patching 12-SP4  
    zypper in -t patch SUSE-SLE-Live-Patching-12-SP4-2023-2232=1

  * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4  
    zypper in -t patch SUSE-SLE-SERVER-12-SP4-ESPOS-2023-2232=1

  * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4  
    zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2023-2232=1

## Package List:

  * SUSE OpenStack Cloud 9 (nosrc x86_64)
    * kernel-default-4.12.14-95.125.1
  * SUSE OpenStack Cloud 9 (x86_64)
    * kernel-default-base-debuginfo-4.12.14-95.125.1
    * kernel-default-base-4.12.14-95.125.1
    * kernel-default-devel-debuginfo-4.12.14-95.125.1
    * kernel-default-devel-4.12.14-95.125.1
    * kernel-default-debuginfo-4.12.14-95.125.1
    * kernel-default-debugsource-4.12.14-95.125.1
    * kernel-syms-4.12.14-95.125.1
  * SUSE OpenStack Cloud 9 (noarch)
    * kernel-source-4.12.14-95.125.1
    * kernel-macros-4.12.14-95.125.1
    * kernel-devel-4.12.14-95.125.1
  * SUSE OpenStack Cloud Crowbar 9 (nosrc x86_64)
    * kernel-default-4.12.14-95.125.1
  * SUSE OpenStack Cloud Crowbar 9 (x86_64)
    * kernel-default-base-debuginfo-4.12.14-95.125.1
    * kernel-default-base-4.12.14-95.125.1
    * kernel-default-devel-debuginfo-4.12.14-95.125.1
    * kernel-default-devel-4.12.14-95.125.1
    * kernel-default-debuginfo-4.12.14-95.125.1
    * kernel-default-debugsource-4.12.14-95.125.1
    * kernel-syms-4.12.14-95.125.1
  * SUSE OpenStack Cloud Crowbar 9 (noarch)
    * kernel-source-4.12.14-95.125.1
    * kernel-macros-4.12.14-95.125.1
    * kernel-devel-4.12.14-95.125.1
  * SUSE Linux Enterprise Server for SAP Applications 12 SP4 (ppc64le x86_64)
    * cluster-md-kmp-default-4.12.14-95.125.1
    * gfs2-kmp-default-4.12.14-95.125.1
    * kernel-default-base-debuginfo-4.12.14-95.125.1
    * kernel-default-base-4.12.14-95.125.1
    * ocfs2-kmp-default-debuginfo-4.12.14-95.125.1
    * cluster-md-kmp-default-debuginfo-4.12.14-95.125.1
    * gfs2-kmp-default-debuginfo-4.12.14-95.125.1
    * kernel-default-debuginfo-4.12.14-95.125.1
    * kernel-default-devel-4.12.14-95.125.1
    * dlm-kmp-default-debuginfo-4.12.14-95.125.1
    * dlm-kmp-default-4.12.14-95.125.1
    * drbd-debugsource-9.0.14+git.62f906cf-4.26.2
    * drbd-9.0.14+git.62f906cf-4.26.2
    * kernel-default-debugsource-4.12.14-95.125.1
    * drbd-kmp-default-9.0.14+git.62f906cf_k4.12.14_95.125-4.26.2
    * ocfs2-kmp-default-4.12.14-95.125.1
    * kernel-syms-4.12.14-95.125.1
    * drbd-kmp-default-debuginfo-9.0.14+git.62f906cf_k4.12.14_95.125-4.26.2
  * SUSE Linux Enterprise Server for SAP Applications 12 SP4 (nosrc ppc64le
    x86_64)
    * kernel-default-4.12.14-95.125.1
  * SUSE Linux Enterprise Server for SAP Applications 12 SP4 (noarch)
    * kernel-source-4.12.14-95.125.1
    * kernel-macros-4.12.14-95.125.1
    * kernel-devel-4.12.14-95.125.1
  * SUSE Linux Enterprise Server for SAP Applications 12 SP4 (x86_64)
    * kernel-default-devel-debuginfo-4.12.14-95.125.1
  * SUSE Linux Enterprise High Availability Extension 12 SP4 (ppc64le s390x
    x86_64)
    * cluster-md-kmp-default-4.12.14-95.125.1
    * gfs2-kmp-default-4.12.14-95.125.1
    * ocfs2-kmp-default-debuginfo-4.12.14-95.125.1
    * cluster-md-kmp-default-debuginfo-4.12.14-95.125.1
    * gfs2-kmp-default-debuginfo-4.12.14-95.125.1
    * kernel-default-debuginfo-4.12.14-95.125.1
    * dlm-kmp-default-debuginfo-4.12.14-95.125.1
    * dlm-kmp-default-4.12.14-95.125.1
    * drbd-debugsource-9.0.14+git.62f906cf-4.26.2
    * drbd-9.0.14+git.62f906cf-4.26.2
    * kernel-default-debugsource-4.12.14-95.125.1
    * drbd-kmp-default-9.0.14+git.62f906cf_k4.12.14_95.125-4.26.2
    * ocfs2-kmp-default-4.12.14-95.125.1
    * drbd-kmp-default-debuginfo-9.0.14+git.62f906cf_k4.12.14_95.125-4.26.2
  * SUSE Linux Enterprise High Availability Extension 12 SP4 (nosrc)
    * kernel-default-4.12.14-95.125.1
  * SUSE Linux Enterprise Live Patching 12-SP4 (nosrc)
    * kernel-default-4.12.14-95.125.1
  * SUSE Linux Enterprise Live Patching 12-SP4 (ppc64le s390x x86_64)
    * kernel-default-kgraft-devel-4.12.14-95.125.1
    * kgraft-patch-4_12_14-95_125-default-1-6.5.1
    * kernel-default-kgraft-4.12.14-95.125.1
  * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (aarch64 nosrc x86_64)
    * kernel-default-4.12.14-95.125.1
  * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (aarch64 x86_64)
    * kernel-default-base-debuginfo-4.12.14-95.125.1
    * kernel-default-base-4.12.14-95.125.1
    * kernel-default-devel-4.12.14-95.125.1
    * kernel-default-debuginfo-4.12.14-95.125.1
    * kernel-default-debugsource-4.12.14-95.125.1
    * kernel-syms-4.12.14-95.125.1
  * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (noarch)
    * kernel-source-4.12.14-95.125.1
    * kernel-macros-4.12.14-95.125.1
    * kernel-devel-4.12.14-95.125.1
  * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (x86_64)
    * kernel-default-devel-debuginfo-4.12.14-95.125.1
  * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (aarch64 ppc64le s390x
    x86_64 nosrc)
    * kernel-default-4.12.14-95.125.1
  * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (aarch64 ppc64le s390x
    x86_64)
    * kernel-default-base-debuginfo-4.12.14-95.125.1
    * kernel-default-base-4.12.14-95.125.1
    * kernel-default-devel-4.12.14-95.125.1
    * kernel-default-debuginfo-4.12.14-95.125.1
    * kernel-default-debugsource-4.12.14-95.125.1
    * kernel-syms-4.12.14-95.125.1
  * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (noarch)
    * kernel-source-4.12.14-95.125.1
    * kernel-macros-4.12.14-95.125.1
    * kernel-devel-4.12.14-95.125.1
  * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (s390x)
    * kernel-default-man-4.12.14-95.125.1
  * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (x86_64)
    * kernel-default-devel-debuginfo-4.12.14-95.125.1

## References:

  * https://www.suse.com/security/cve/CVE-2017-5753.html
  * https://www.suse.com/security/cve/CVE-2020-36691.html
  * https://www.suse.com/security/cve/CVE-2021-3923.html
  * https://www.suse.com/security/cve/CVE-2021-4203.html
  * https://www.suse.com/security/cve/CVE-2022-20567.html
  * https://www.suse.com/security/cve/CVE-2022-43945.html
  * https://www.suse.com/security/cve/CVE-2023-0590.html
  * https://www.suse.com/security/cve/CVE-2023-0597.html
  * https://www.suse.com/security/cve/CVE-2023-1076.html
  * https://www.suse.com/security/cve/CVE-2023-1095.html
  * https://www.suse.com/security/cve/CVE-2023-1118.html
  * https://www.suse.com/security/cve/CVE-2023-1390.html
  * https://www.suse.com/security/cve/CVE-2023-1513.html
  * https://www.suse.com/security/cve/CVE-2023-1611.html
  * https://www.suse.com/security/cve/CVE-2023-1670.html
  * https://www.suse.com/security/cve/CVE-2023-1855.html
  * https://www.suse.com/security/cve/CVE-2023-1989.html
  * https://www.suse.com/security/cve/CVE-2023-1990.html
  * https://www.suse.com/security/cve/CVE-2023-1998.html
  * https://www.suse.com/security/cve/CVE-2023-2124.html
  * https://www.suse.com/security/cve/CVE-2023-2162.html
  * https://www.suse.com/security/cve/CVE-2023-23454.html
  * https://www.suse.com/security/cve/CVE-2023-23455.html
  * https://www.suse.com/security/cve/CVE-2023-2483.html
  * https://www.suse.com/security/cve/CVE-2023-28328.html
  * https://www.suse.com/security/cve/CVE-2023-28464.html
  * https://www.suse.com/security/cve/CVE-2023-28772.html
  * https://www.suse.com/security/cve/CVE-2023-30772.html
  * https://bugzilla.suse.com/show_bug.cgi?id=1076830
  * https://bugzilla.suse.com/show_bug.cgi?id=1194535
  * https://bugzilla.suse.com/show_bug.cgi?id=1202353
  * https://bugzilla.suse.com/show_bug.cgi?id=1205128
  * https://bugzilla.suse.com/show_bug.cgi?id=1207036
  * https://bugzilla.suse.com/show_bug.cgi?id=1207125
  * https://bugzilla.suse.com/show_bug.cgi?id=1207168
  * https://bugzilla.suse.com/show_bug.cgi?id=1207185
  * https://bugzilla.suse.com/show_bug.cgi?id=1207795
  * https://bugzilla.suse.com/show_bug.cgi?id=1207845
  * https://bugzilla.suse.com/show_bug.cgi?id=1208179
  * https://bugzilla.suse.com/show_bug.cgi?id=1208333
  * https://bugzilla.suse.com/show_bug.cgi?id=1208599
  * https://bugzilla.suse.com/show_bug.cgi?id=1208777
  * https://bugzilla.suse.com/show_bug.cgi?id=1208837
  * https://bugzilla.suse.com/show_bug.cgi?id=1208850
  * https://bugzilla.suse.com/show_bug.cgi?id=1209008
  * https://bugzilla.suse.com/show_bug.cgi?id=1209052
  * https://bugzilla.suse.com/show_bug.cgi?id=1209256
  * https://bugzilla.suse.com/show_bug.cgi?id=1209289
  * https://bugzilla.suse.com/show_bug.cgi?id=1209291
  * https://bugzilla.suse.com/show_bug.cgi?id=1209532
  * https://bugzilla.suse.com/show_bug.cgi?id=1209547
  * https://bugzilla.suse.com/show_bug.cgi?id=1209549
  * https://bugzilla.suse.com/show_bug.cgi?id=1209613
  * https://bugzilla.suse.com/show_bug.cgi?id=1209687
  * https://bugzilla.suse.com/show_bug.cgi?id=1209777
  * https://bugzilla.suse.com/show_bug.cgi?id=1209778
  * https://bugzilla.suse.com/show_bug.cgi?id=1209845
  * https://bugzilla.suse.com/show_bug.cgi?id=1209871
  * https://bugzilla.suse.com/show_bug.cgi?id=1209887
  * https://bugzilla.suse.com/show_bug.cgi?id=1210124
  * https://bugzilla.suse.com/show_bug.cgi?id=1210202
  * https://bugzilla.suse.com/show_bug.cgi?id=1210301
  * https://bugzilla.suse.com/show_bug.cgi?id=1210329
  * https://bugzilla.suse.com/show_bug.cgi?id=1210336
  * https://bugzilla.suse.com/show_bug.cgi?id=1210337
  * https://bugzilla.suse.com/show_bug.cgi?id=1210469
  * https://bugzilla.suse.com/show_bug.cgi?id=1210498
  * https://bugzilla.suse.com/show_bug.cgi?id=1210506
  * https://bugzilla.suse.com/show_bug.cgi?id=1210647
  * https://bugzilla.suse.com/show_bug.cgi?id=1211037
to post comments


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds