Upstream information
Description
In the Linux kernel, the following vulnerability has been resolved:aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
This patch is against CVE-2023-6270. The description of cve is:
A flaw was found in the ATA over Ethernet (AoE) driver in the Linux
kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on
`struct net_device`, and a use-after-free can be triggered by racing
between the free on the struct and the access through the `skbtxq`
global queue. This could lead to a denial of service condition or
potential code execution.
In aoecmd_cfg_pkts(), it always calls dev_put(ifp) when skb initial
code is finished. But the net_device ifp will still be used in
later tx()->dev_queue_xmit() in kthread. Which means that the
dev_put(ifp) should NOT be called in the success path of skb
initial code in aoecmd_cfg_pkts(). Otherwise tx() may run into
use-after-free because the net_device is freed.
This patch removed the dev_put(ifp) in the success path in
aoecmd_cfg_pkts(), and added dev_put() after skb xmit in tx().
SUSE information
Overall state of this security issue: Does not affect SUSE products
National Vulnerability Database | SUSE | |
---|---|---|
Base Score | 7.8 | 7.8 |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Attack Vector | Local | Local |
Attack Complexity | Low | Low |
Privileges Required | Low | Low |
User Interaction | None | None |
Scope | Unchanged | Unchanged |
Confidentiality Impact | High | High |
Integrity Impact | High | High |
Availability Impact | High | High |
CVSSv3 Version | 3.1 | 3.1 |
Note from the SUSE Security Team on the kernel-default package
SUSE will no longer fix all CVEs in the Linux Kernel anymore, but declare some bug classes as won't fix. Please refer to TID 21496 for more details. SUSE Bugzilla entries: 1218562 [IN_PROGRESS], 1223016 [IN_PROGRESS], 1223017 [NEW]SUSE Security Advisories:
- SUSE-SU-2024:1641-1, published Tue May 14 16:33:37 UTC 2024
- SUSE-SU-2024:1642-1, published Tue May 14 16:33:19 UTC 2024
- SUSE-SU-2024:1643-1, published Tue May 14 16:33:08 UTC 2024
- SUSE-SU-2024:1644-1, published Tue May 14 16:32:29 UTC 2024
- SUSE-SU-2024:1645-1, published Tue May 14 16:31:48 UTC 2024
- SUSE-SU-2024:1646-1, published Tue May 14 16:31:29 UTC 2024
- SUSE-SU-2024:1647-1, published Tue May 14 16:30:55 UTC 2024
- SUSE-SU-2024:1648-1, published Tue May 14 16:30:38 UTC 2024
- SUSE-SU-2024:1648-2, published Tue May 21 16:30:54 UTC 2024
- SUSE-SU-2024:1650-1, published Wed May 15 08:30:08 UTC 2024
- SUSE-SU-2024:1659-1, published Wed May 15 12:30:53 UTC 2024
- SUSE-SU-2024:1663-1, published Mon Aug 19 12:41:16 UTC 2024
- SUSE-SU-2024:1669-1, published Mon Aug 19 12:41:11 UTC 2024
- SUSE-SU-2024:1870-1, published Thu May 30 16:30:54 UTC 2024
- SUSE-SU-2024:2135-1, published Fri Jun 21 12:32:14 UTC 2024
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
Container bci/bci-sle15-kernel-module-devel:15.5 |
| |
Container suse/sl-micro/6.0/kvm-os-container:2.1.1-3.34 |
| |
Container suse/sl-micro/6.0/rt-os-container:2.1.2-4.6 |
| |
Container suse/sle-micro-rancher/5.2:latest Image SLES15-SP3-BYOS-Azure Image SLES15-SP3-BYOS-EC2-HVM Image SLES15-SP3-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-HPC-BYOS-Azure Image SLES15-SP3-HPC-BYOS-EC2-HVM Image SLES15-SP3-HPC-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE |
| |
Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest Image SLES15-SP4-BYOS Image SLES15-SP4-BYOS-Azure Image SLES15-SP4-BYOS-EC2 Image SLES15-SP4-BYOS-GCE Image SLES15-SP4-CHOST-BYOS Image SLES15-SP4-CHOST-BYOS-Aliyun Image SLES15-SP4-CHOST-BYOS-Azure Image SLES15-SP4-CHOST-BYOS-EC2 Image SLES15-SP4-CHOST-BYOS-GCE Image SLES15-SP4-CHOST-BYOS-SAP-CCloud Image SLES15-SP4-HPC-BYOS Image SLES15-SP4-HPC-BYOS-Azure Image SLES15-SP4-HPC-BYOS-EC2 Image SLES15-SP4-HPC-BYOS-GCE Image SLES15-SP4-HPC-EC2 Image SLES15-SP4-HPC-GCE Image SLES15-SP4-Hardened-BYOS Image SLES15-SP4-Hardened-BYOS-Azure Image SLES15-SP4-Hardened-BYOS-EC2 Image SLES15-SP4-Hardened-BYOS-GCE Image SLES15-SP4-Manager-Proxy-4-3-BYOS Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3 Image SLES15-SP4-Manager-Server-4-3-Azure-llc Image SLES15-SP4-Manager-Server-4-3-Azure-ltd Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-EC2-llc Image SLES15-SP4-Manager-Server-4-3-EC2-ltd Image SLES15-SP4-Micro-5-3 Image SLES15-SP4-Micro-5-3-BYOS Image SLES15-SP4-Micro-5-3-BYOS-Azure Image SLES15-SP4-Micro-5-3-BYOS-EC2 Image SLES15-SP4-Micro-5-3-BYOS-GCE Image SLES15-SP4-Micro-5-3-EC2 Image SLES15-SP4-Micro-5-4 Image SLES15-SP4-Micro-5-4-BYOS Image SLES15-SP4-Micro-5-4-BYOS-Azure Image SLES15-SP4-Micro-5-4-BYOS-EC2 Image SLES15-SP4-Micro-5-4-BYOS-GCE Image SLES15-SP4-Micro-5-4-EC2 Image SLES15-SP4-Micro-5-4-GCE Image SLES15-SP4-SAP Image SLES15-SP4-SAP-Azure Image SLES15-SP4-SAP-EC2 Image SLES15-SP4-SAP-GCE Image SLES15-SP4-SAPCAL Image SLES15-SP4-SAPCAL-Azure Image SLES15-SP4-SAPCAL-EC2 Image SLES15-SP4-SAPCAL-GCE |
| |
Container suse/sle-micro/kvm-5.5:2.0.4-3.5.2 |
| |
Container suse/sle-micro/rt-5.5:2.0.4-4.5.3 |
| |
Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE |
| |
Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand |
| |
Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand |
| |
Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production |
| |
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production |
| |
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE |
| |
Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-Azure Image SLES15-SP4-SAP-BYOS-EC2 Image SLES15-SP4-SAP-BYOS-GCE Image SLES15-SP4-SAP-Hardened Image SLES15-SP4-SAP-Hardened-Azure Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-Azure Image SLES15-SP4-SAP-Hardened-BYOS-EC2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE Image SLES15-SP4-SAP-Hardened-GCE |
| |
Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-HPC-Azure |
| |
Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-Aliyun Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-GDC Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-Manager-Proxy-5-0-BYOS Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0-BYOS Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-EC2 Image SLES15-SP5-Micro-5-5-BYOS-GCE Image SLES15-SP5-Micro-5-5-EC2 Image SLES15-SP5-Micro-5-5-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE |
| |
Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-GCE |
| |
Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure |
| |
SUSE Enterprise Storage 7.1 |
| Patchnames: SUSE-Storage-7.1-2024-1642 |
SUSE Linux Enterprise Desktop 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-1659 SUSE-SLE-Module-Development-Tools-15-SP5-2024-1659 SUSE-SLE-Product-WE-15-SP5-2024-1659 |
SUSE Linux Enterprise High Availability Extension 12 SP5 |
| Patchnames: SUSE-SLE-HA-12-SP5-2024-1870 |
SUSE Linux Enterprise High Availability Extension 15 SP2 |
| Patchnames: SUSE-SLE-Product-HA-15-SP2-2024-1650 |
SUSE Linux Enterprise High Availability Extension 15 SP3 |
| Patchnames: SUSE-SLE-Product-HA-15-SP3-2024-1642 |
SUSE Linux Enterprise High Availability Extension 15 SP4 |
| Patchnames: SUSE-SLE-Product-HA-15-SP4-2024-1641 |
SUSE Linux Enterprise High Availability Extension 15 SP5 |
| Patchnames: SUSE-SLE-Product-HA-15-SP5-2024-1659 |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS |
| Patchnames: SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1650 |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS |
| Patchnames: SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1642 |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS |
| Patchnames: SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1641 |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS |
| Patchnames: SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1641 |
SUSE Linux Enterprise High Performance Computing 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-1659 SUSE-SLE-Module-Development-Tools-15-SP5-2024-1659 SUSE-SLE-Module-Legacy-15-SP5-2024-1659 SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1644 |
SUSE Linux Enterprise High Performance Computing 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 |
| Patchnames: SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2135 |
SUSE Linux Enterprise Live Patching 12 SP5 |
| Patchnames: SUSE-SLE-Live-Patching-12-SP5-2024-1870 |
SUSE Linux Enterprise Live Patching 15 SP2 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP2-2024-1650 | |
SUSE Linux Enterprise Live Patching 15 SP3 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP3-2024-1642 | |
SUSE Linux Enterprise Live Patching 15 SP4 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP4-2024-1641 | |
SUSE Linux Enterprise Live Patching 15 SP5 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP5-2024-1659 SUSE-SLE-Module-Live-Patching-15-SP5-2024-1663 | |
SUSE Linux Enterprise Micro 5.1 |
| Patchnames: SUSE-SUSE-MicroOS-5.1-2024-1642 SUSE-SUSE-MicroOS-5.1-2024-1645 |
SUSE Linux Enterprise Micro 5.2 |
| Patchnames: SUSE-SUSE-MicroOS-5.2-2024-1642 SUSE-SUSE-MicroOS-5.2-2024-1645 |
SUSE Linux Enterprise Micro 5.3 |
| Patchnames: SUSE-SLE-Micro-5.3-2024-1641 SUSE-SLE-Micro-5.3-2024-1647 |
SUSE Linux Enterprise Micro 5.4 |
| Patchnames: SUSE-SLE-Micro-5.4-2024-1641 SUSE-SLE-Micro-5.4-2024-1647 |
SUSE Linux Enterprise Micro 5.5 |
| Patchnames: SUSE-SLE-Micro-5.5-2024-1659 SUSE-SLE-Micro-5.5-2024-1663 |
SUSE Linux Enterprise Micro 6.0 |
| Patchnames: SUSE-SLE-Micro-6.0-14 SUSE-SLE-Micro-6.0-19 |
SUSE Linux Enterprise Module for Basesystem 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-1659 |
SUSE Linux Enterprise Module for Development Tools 15 SP5 |
| Patchnames: SUSE-SLE-Module-Development-Tools-15-SP5-2024-1659 |
SUSE Linux Enterprise Module for Legacy 15 SP5 |
| Patchnames: SUSE-SLE-Module-Legacy-15-SP5-2024-1659 |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 |
| Patchnames: SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1644 |
SUSE Linux Enterprise Real Time 12 SP5 |
| Patchnames: SUSE-SLE-RT-12-SP5-2024-1646 |
SUSE Linux Enterprise Real Time 15 SP5 SUSE Real Time Module 15 SP5 |
| Patchnames: SUSE-SLE-Module-RT-15-SP5-2024-1663 |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE |
| Patchnames: SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2024-1669 |
SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 |
| Patchnames: SUSE-SLE-SDK-12-SP5-2024-1870 SUSE-SLE-SERVER-12-SP5-2024-1643 SUSE-SLE-SERVER-12-SP5-2024-1870 SUSE-SLE-WE-12-SP5-2024-1870 |
SUSE Linux Enterprise Server 15 SP2-LTSS |
| Patchnames: SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1650 |
SUSE Linux Enterprise Server 15 SP3-LTSS |
| Patchnames: SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1642 |
SUSE Linux Enterprise Server 15 SP4-LTSS |
| Patchnames: SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1641 |
SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-1659 SUSE-SLE-Module-Development-Tools-15-SP5-2024-1659 SUSE-SLE-Module-Legacy-15-SP5-2024-1659 SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1644 SUSE-SLE-Product-WE-15-SP5-2024-1659 |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 |
| Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1650 |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 |
| Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1642 |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 |
| Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1641 |
SUSE Linux Enterprise Software Development Kit 12 SP5 |
| Patchnames: SUSE-SLE-SDK-12-SP5-2024-1870 |
SUSE Linux Enterprise Workstation Extension 12 SP5 |
| Patchnames: SUSE-SLE-WE-12-SP5-2024-1870 |
SUSE Linux Enterprise Workstation Extension 15 SP5 |
| Patchnames: SUSE-SLE-Product-WE-15-SP5-2024-1659 |
SUSE Manager Proxy 4.3 |
| Patchnames: SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1641 |
SUSE Manager Retail Branch Server 4.3 |
| Patchnames: SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2024-1641 |
SUSE Manager Server 4.3 |
| Patchnames: SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1641 |
openSUSE Leap 15.5 |
| Patchnames: openSUSE-SLE-15.5-2024-1644 openSUSE-SLE-15.5-2024-1659 openSUSE-SLE-15.5-2024-1663 |
openSUSE Leap 15.6 |
| Patchnames: openSUSE-SLE-15.6-2024-2135 |
openSUSE Leap Micro 5.3 |
| Patchnames: openSUSE-Leap-Micro-5.3-2024-1641 openSUSE-Leap-Micro-5.3-2024-1647 |
openSUSE Leap Micro 5.4 |
| Patchnames: openSUSE-Leap-Micro-5.4-2024-1641 openSUSE-Leap-Micro-5.4-2024-1647 |
openSUSE Leap Micro 5.5 |
| Patchnames: openSUSE-Leap-Micro-5.5-2024-1659 openSUSE-Leap-Micro-5.5-2024-1663 |
SUSE Timeline for this CVE
CVE page created: Wed Apr 17 14:01:33 2024CVE page last modified: Sun Oct 13 12:22:01 2024