{"affected":[{"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.202.5","kernel-default-base":"4.4.121-92.202.5","kernel-default-devel":"4.4.121-92.202.5","kernel-devel":"4.4.121-92.202.6","kernel-macros":"4.4.121-92.202.6","kernel-source":"4.4.121-92.202.6","kernel-syms":"4.4.121-92.202.6"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","name":"kernel-default","purl":"purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.4.121-92.202.5"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.202.5","kernel-default-base":"4.4.121-92.202.5","kernel-default-devel":"4.4.121-92.202.5","kernel-devel":"4.4.121-92.202.6","kernel-macros":"4.4.121-92.202.6","kernel-source":"4.4.121-92.202.6","kernel-syms":"4.4.121-92.202.6"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","name":"kernel-source","purl":"purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.4.121-92.202.6"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.202.5","kernel-default-base":"4.4.121-92.202.5","kernel-default-devel":"4.4.121-92.202.5","kernel-devel":"4.4.121-92.202.6","kernel-macros":"4.4.121-92.202.6","kernel-source":"4.4.121-92.202.6","kernel-syms":"4.4.121-92.202.6"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","name":"kernel-syms","purl":"purl:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.4.121-92.202.6"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\nThe SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700).\n- CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051).\n- CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). \n- CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332).\n- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).\n","id":"SUSE-SU-2023:0767-1","modified":"2023-03-16T12:17:04Z","published":"2023-03-16T12:17:04Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230767-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203331"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203332"},{"type":"REPORT","url":"https://bugzilla.suse.com/1207051"},{"type":"REPORT","url":"https://bugzilla.suse.com/1207795"},{"type":"REPORT","url":"https://bugzilla.suse.com/1208700"},{"type":"REPORT","url":"https://bugzilla.suse.com/1209188"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-36280"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-38096"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-0590"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-23559"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-26545"}],"related":["CVE-2022-36280","CVE-2022-38096","CVE-2023-0590","CVE-2023-23559","CVE-2023-26545"],"summary":"Security update for the Linux Kernel"}