A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double decrement of the reference count. This issue may allow a local attacker with user privilege to crash the system or may lead to leaked internal kernel information.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel     due to a double decrement of the reference count. This issue may allow a local attacker with user     privilege to crash the system or may lead to leaked internal kernel information. (CVE-2023-4389)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4072-2 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2023-4563: Fixed an use-after-free flaw in the nftables sub-component. This vulnerability could     allow a local attacker to crash the system or lead to a kernel information leak problem. (bsc#1214727)
    - CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to     disclose sensitive information. (bsc#1215861)
    - CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to     disclose sensitive information. (bsc#1215860)
    - CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to     disclose sensitive information. (bsc#1215858)
    - CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated     attacker to trigger a DoS. (bsc#1215467)
    - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be     exploited to achieve local privilege escalation. (bsc#1215899)
    - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a     stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations     without stack guard pages. (bsc#1214022)
    - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order     to leak internal kernel information or crash the system (bsc#1214351).
    - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have     allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
    - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the     local network or with a high bandwidth connection can increase the CPU usage of the server that accepts     IPV6 connections up to 95% (bsc#1212703).
    - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be     exploited to achieve local privilege escalatio (bsc#1215275).
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be     exploited to achieve local privilege escalation (bsc#1215117).
    - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to     achieve local privilege escalation (bsc#1215115).
    - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash     the system (bsc#1210169).
    - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential     information disclosure or a denial of service (bsc#1215221).
    - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a     user to crash the system (bsc#1210643).
    - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4095-1 advisory.

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the     local network or with a high bandwidth connection can increase the CPU usage of the server that accepts     IPV6 connections up to 95% (bsc#1212703).
    - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have     allowed a local user to crash the system or potentially escalate their privileges on the system.
    (bsc#1215150)
    - CVE-2023-4389: Fixed a a double decrement of the reference count flaw in the btrfs filesystem a double     decrement of the reference count, which may have allowed a local attacker with user privilege to crash the     system or may lead to leaked internal kernel information. (bsc#1214351)
    - CVE-2023-4921: Fixed a use-after-free vulnerability in the sch_qfq component which could be exploited to     achieve local privilege escalation. (bsc#1215275)
    - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036).
    - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812).
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the af_unix component which could be exploited to     achieve local privilege escalation. (bsc#1215117)
    - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to     achieve local privilege escalation (bsc#1215115).
    - CVE-2020-36766: Fixed an issue in drivers/media/cec/core/cec-api.c which could leaks one byte of kernel     memory on specific hardware to unprivileged users. (bsc#1215299)
    - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs. This flaw could allow a local     attacker to crash the system due to a race problem, possibly leading to a kernel information leak.
    (bsc#1210169)
    - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a     user to crash the system or potentially cause a denial of service. (bsc#1210643)
    - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential     information disclosure or a denial of service (bsc#1215221).
    - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).
    - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4093-1 advisory.

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861).
    - CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860).
    - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858).
    - CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service     (bsc#1215467).
    - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order     to leak internal kernel information or crash the system (bsc#1214351).
    - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be     exploited to achieve local privilege escalation. (bsc#1215899)
    - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have     allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
    - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the     local network or with a high bandwidth connection can increase the CPU usage of the server that accepts     IPV6 connections up to 95% (bsc#1212703).
    - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be     exploited to achieve local privilege escalatio (bsc#1215275).
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be     exploited to achieve local privilege escalation (bsc#1215117).
    - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to     achieve local privilege escalation (bsc#1215115).
    - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a     stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations     without stack guard pages. (bsc#1214022)
    - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash     the system (bsc#1210169).
    - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential     information disclosure or a denial of service (bsc#1215221).
    - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a     user to crash the system (bsc#1210643).
    - CVE-2023-4563: Fixed an use-after-free flaw in the nftables sub-component. This vulnerability could     allow a local attacker to crash the system or lead to a kernel information leak problem. (bsc#1214727)
    - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4072-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2023-4563: Fixed an use-after-free flaw in the nftables sub-component. This vulnerability could     allow a local attacker to crash the system or lead to a kernel information leak problem. (bsc#1214727)
    - CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to     disclose sensitive information. (bsc#1215861)
    - CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to     disclose sensitive information. (bsc#1215860)
    - CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to     disclose sensitive information. (bsc#1215858)
    - CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated     attacker to trigger a DoS. (bsc#1215467)
    - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be     exploited to achieve local privilege escalation. (bsc#1215899)
    - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a     stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations     without stack guard pages. (bsc#1214022)
    - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order     to leak internal kernel information or crash the system (bsc#1214351).
    - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have     allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
    - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the     local network or with a high bandwidth connection can increase the CPU usage of the server that accepts     IPV6 connections up to 95% (bsc#1212703).
    - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be     exploited to achieve local privilege escalatio (bsc#1215275).
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be     exploited to achieve local privilege escalation (bsc#1215117).
    - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to     achieve local privilege escalation (bsc#1215115).
    - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash     the system (bsc#1210169).
    - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential     information disclosure or a denial of service (bsc#1215221).
    - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a     user to crash the system (bsc#1210643).
    - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4071-1 advisory.

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to     disclose sensitive information. (bsc#1215861)
    - CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to     disclose sensitive information. (bsc#1215860)
    - CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to     disclose sensitive information. (bsc#1215858)
    - CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated     attacker to trigger a DoS. (bsc#1215467)
    - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be     exploited to achieve local privilege escalation. (bsc#1215899)
    - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a     stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations     without stack guard pages. (bsc#1214022)
    - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order     to leak internal kernel information or crash the system (bsc#1214351).
    - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have     allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
    - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the     local network or with a high bandwidth connection can increase the CPU usage of the server that accepts     IPV6 connections up to 95% (bsc#1212703).
    - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be     exploited to achieve local privilege escalatio (bsc#1215275).
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be     exploited to achieve local privilege escalation (bsc#1215117).
    - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to     achieve local privilege escalation (bsc#1215115).
    - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash     the system (bsc#1210169).
    - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential     information disclosure or a denial of service (bsc#1215221).
    - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a     user to crash the system (bsc#1210643).
    - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4057-1 advisory.

    The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2023-4563: Fixed an use-after-free flaw in the nftables sub-component. This vulnerability could     allow a local attacker to crash the system or lead to a kernel information leak problem. (bsc#1214727)
    - CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to     disclose sensitive information. (bsc#1215861)
    - CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to     disclose sensitive information. (bsc#1215860)
    - CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to     disclose sensitive information. (bsc#1215858)
    - CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated     attacker to trigger a DoS. (bsc#1215467)
    - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be     exploited to achieve local privilege escalation. (bsc#1215899)
    - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a     stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations     without stack guard pages. (bsc#1214022)
    - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order     to leak internal kernel information or crash the system (bsc#1214351).
    - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have     allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
    - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the     local network or with a high bandwidth connection can increase the CPU usage of the server that accepts     IPV6 connections up to 95% (bsc#1212703).
    - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be     exploited to achieve local privilege escalatio (bsc#1215275).
    - CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be     exploited to achieve local privilege escalation (bsc#1215117).
    - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to     achieve local privilege escalation (bsc#1215115).
    - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash     the system (bsc#1210169).
    - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential     information disclosure or a denial of service (bsc#1215221).
    - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a     user to crash the system (bsc#1210643).
    - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4058-1 advisory.

    The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858).
    - CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860).
    - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861).
    - CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service     (bsc#1215467).
    - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order     to leak internal kernel information or crash the system (bsc#1214351).
    - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be     exploited to achieve local privilege escalation (bsc#1215899).
    - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have     allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
    - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table which could be exploited     by network adjacent attackers, increasing CPU usage by 95% (bsc#1212703).
    - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be     exploited to achieve local privilege escalatio (bsc#1215275).
    - CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be     exploited to achieve local privilege escalation (bsc#1215117).
    - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to     achieve local privilege escalation (bsc#1215115).
    - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a     stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations     without stack guard pages (bsc#1214022).
    - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash     the system (bsc#1210169).
    - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential     information disclosure or a denial of service (bsc#1215221).
    - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a     user to crash the system (bsc#1210643).
    - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).
    - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4030-1 advisory.

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order     to leak internal kernel information or crash the system (bsc#1214351).
    - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have     allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
    - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table which could be exploited     by network adjacent attackers, increasing CPU usage by 95% (bsc#1212703).
    - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be     exploited to achieve local privilege escalatio (bsc#1215275).
    - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036).
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be     exploited to achieve local privilege escalation (bsc#1215117).
    - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to     achieve local privilege escalation (bsc#1215115).
    - CVE-2020-36766: Fixed a potential information leak in in the CEC driver (bsc#1215299).
    - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash     the system (bsc#1210169).
    - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a     user to crash the system (bsc#1210643).
    - CVE-2023-4881: Fixed an out-of-bounds write flaw in the netfilter subsystem that could lead to     information disclosure or denial of service (bsc#1215221).
    - CVE-2023-40283: Fixed a use-after-free issue in the Bluetooth subsystem (bsc#1214233).
    - CVE-2023-1192: Fixed a use-after-free in the CIFS subsystem (bsc#1208995).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4035-1 advisory.

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861).
    - CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860).
    - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858).
    - CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service     (bsc#1215467).
    - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order     to leak internal kernel information or crash the system (bsc#1214351).
    - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be     exploited to achieve local privilege escalation. (bsc#1215899)
    - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have     allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150).
    - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the     local network or with a high bandwidth connection can increase the CPU usage of the server that accepts     IPV6 connections up to 95% (bsc#1212703).
    - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be     exploited to achieve local privilege escalatio (bsc#1215275).
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be     exploited to achieve local privilege escalation (bsc#1215117).
    - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to     achieve local privilege escalation (bsc#1215115).
    - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a     stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations     without stack guard pages. (bsc#1214022)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

ID	Name	Product	Family	Severity
226435	Linux Distros Unpatched Vulnerability : CVE-2023-4389	Nessus	Misc.	high
184801	openSUSE 15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2023:4072-2)	Nessus	SuSE Local Security Checks	high
183287	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:4095-1)	Nessus	SuSE Local Security Checks	high
183278	SUSE SLES15 Security Update : kernel (SUSE-SU-2023:4093-1)	Nessus	SuSE Local Security Checks	high
183076	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:4072-1)	Nessus	SuSE Local Security Checks	high
183072	SUSE SLED15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2023:4071-1)	Nessus	SuSE Local Security Checks	high
183010	SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2023:4057-1)	Nessus	SuSE Local Security Checks	high
183008	SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2023:4058-1)	Nessus	SuSE Local Security Checks	high
182903	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:4030-1)	Nessus	SuSE Local Security Checks	high
182896	SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2023:4035-1)	Nessus	SuSE Local Security Checks	high
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2023-4389

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high