The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4782-1 advisory.

    The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2023-2006: Fixed a race condition in the RxRPC network protocol (bsc#1210447).
    - CVE-2023-25775: Fixed improper access control in the Intel Ethernet Controller RDMA driver     (bsc#1216959).
    - CVE-2023-39197: Fixed a out-of-bounds read in nf_conntrack_dccp_packet() (bsc#1216976).
    - CVE-2023-39198: Fixed a race condition leading to use-after-free in qxl_mode_dumb_create()     (bsc#1216965).
    - CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve     local privilege escalation (bsc#1215420).
    - CVE-2023-45863: Fixed a out-of-bounds write in fill_kobj_path() (bsc#1216058).
    - CVE-2023-45871: Fixed an issue in the IGB driver, where the buffer size may not be adequate for frames     larger than the MTU (bsc#1216259).
    - CVE-2023-46862: Fixed a NULL pointer dereference in io_uring_show_fdinfo() (bsc#1216693).
    - CVE-2023-5158: Fixed a denial of service in vringh_kiov_advance() in drivers/vhost/vringh.c in the host     side of a virtio ring (bsc#1215710).
    - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component     (bsc#1216584).
    - CVE-2023-6039: Fixed a use-after-free in lan78xx_disconnect in drivers/net/usb/lan78xx.c (bsc#1217068).
    - CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality     (bsc#1217332).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2023:4782-1)

critical Nessus Plugin ID 186863

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Jun 26, 2026, 4:08 PM Plugin metadata Plugin Feed: 202606261608
Version 1.1 Jan 5, 2024, 3:16 PM CVSSv2 score source (changed from "CVE-2023-45871" to "CVE-2023-25775") Plugin Feed: 202401051516
Version 1.0 Dec 14, 2023, 6:42 PM New Plugin Feed: 202312141842