SUSE-SU-2021:0117-1
SUSE-SU-2021:0117-1 · Security update for the Linux Kernel
Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.
На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-28374: Fixed a Linux SCSI target issue (bsc#1178372). - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559). - CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960). - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031). - CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c (bnc#1180086). - CVE-2020-0444: Fixed a bad kfree due to a logic error in audit_data_to_entry (bnc#1180027). - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180029). - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179745). - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bnc#1179745). - CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services (RTAS) interface, affecting guests running on top of PowerVM or KVM hypervisors (bnc#1179107). - CVE-2020-29373: Fixed an unsafe handling of the root directory during path lookups in fs/io_uring.c (bnc#1179434). - CVE-2020-11668: Fixed the mishandling of invalid descriptors in the Xirlink camera USB driver (bnc#1168952). - CVE-2020-27830: Fixed a null pointer dereference in speakup (bsc#1179656). - CVE-2020-29370: Fixed a race condition in kmem_cache_alloc_bulk (bnc#1179435). - CVE-2020-27786: Fixed a use after free in kernel midi subsystem snd_rawmidi_kernel_read1() (bsc#1179601). The following non-security bugs were fixed: - ACPI: APEI: Kick the memory_failure() queue for synchronous errors (jsc#SLE-16610). - ACPI: PNP: compare the string length in the matching_id() (git-fixes). - ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (git-fixes). - ALSA: core: memalloc: add page alignment for iram (git-fixes). - ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes). - ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes). - ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes). - ALSA: hda/hdmi: always print pin NIDs as hexadecimal (git-fixes). - ALSA: hda/hdmi: packet buffer index must be set before reading value (git-fixes). - ALSA: hda/proc - print DP-MST connections (git-fixes). - ALSA: hda/realtek - Add new codec supported for ALC897 (git-fixes). - ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (git-fixes). - ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes). - ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (git-fixes). - ALSA: hda/realtek - Fixed Dell AIO wrong sound tone (git-fixes). - ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (git-fixes). - ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes). - ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes). - ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294 (git-fixes). - ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 (git-fixes). - ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (git-fixes). - ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes). - ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes). - ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes). - ALSA: rawmidi: Access runtime->avail always in spinlock (git-fixes). - ALSA: seq: remove useless function (git-fixes). - ALSA: usb-audio: Add generic implicit fb parsing (bsc#1178203). - ALSA: usb-audio: Add hw constraint for implicit fb sync (bsc#1178203). - ALSA: usb-audio: Add implicit fb support for Steinberg UR22 (git-fixes). - ALSA: usb-audio: Add implicit_fb module option (bsc#1178203). - ALSA: usb-audio: Add quirk for Pioneer DJ DDJ-SR2 (git-fixes). - ALSA: usb-audio: Add snd_usb_get_endpoint() helper (bsc#1178203). - ALSA: usb-audio: Add snd_usb_get_host_interface() helper (bsc#1178203). - ALSA: usb-audio: Add support for Pioneer DJ DDJ-RR controller (git-fixes). - ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (git-fixes). - ALSA: usb-audio: Always set up the parameters after resume (bsc#1178203). - ALSA: usb-audio: Avoid doubly initialization for implicit fb (bsc#1178203). - ALSA: usb-audio: Check implicit feedback EP generically for UAC2 (bsc#1178203). - ALSA: usb-audio: Check valid altsetting at parsing rates for UAC2/3 (bsc#1178203). - ALSA: usb-audio: Constify audioformat pointer references (bsc#1178203). - ALSA: usb-audio: Convert to the common vmalloc memalloc (bsc#1178203). - ALSA: usb-audio: Correct wrongly matching entries with audio class (bsc#1178203). - ALSA: usb-audio: Create endpoint objects at parsing phase (bsc#1178203). - ALSA: usb-audio: Disable sample read check if firmware does not give back (git-fixes). - ALSA: usb-audio: Do not call usb_set_interface() at trigger callback (bsc#1178203). - ALSA: usb-audio: Do not set altsetting before initializing sample rate (bsc#1178203). - ALSA: usb-audio: Drop debug.h (bsc#1178203). - ALSA: usb-audio: Drop keep_interface flag again (bsc#1178203). - ALSA: usb-audio: Drop unneeded snd_usb_substream fields (bsc#1178203). - ALSA: usb-audio: Factor out the implicit feedback quirk code (bsc#1178203). - ALSA: usb-audio: Fix control 'access overflow' errors from chmap (git-fixes). - ALSA: usb-audio: Fix EP matching for continuous rates (bsc#1178203). - ALSA: usb-audio: Fix MOTU M-Series quirks (bsc#1178203). - ALSA: usb-audio: Fix possible stall of implicit fb packet ring-buffer (bsc#1178203). - ALSA: usb-audio: Fix potential out-of-bounds shift (git-fixes). - ALSA: usb-audio: Fix quirks for other BOSS devices (bsc#1178203). - ALSA: usb-audio: Handle discrete rates properly in hw constraints (bsc#1178203). - ALSA: usb-audio: Improve some debug prints (bsc#1178203). - ALSA: usb-audio: Move device rename and profile quirks to an internal table (bsc#1178203). - ALSA: usb-audio: Move snd_usb_autoresume() call out of setup_hw_info() (bsc#1178203). - ALSA: usb-audio: Pass snd_usb_audio object to quirk functions (bsc#1178203). - ALSA: usb-audio: Properly match with audio interface class (bsc#1178203). - ALSA: usb-audio: Quirk for BOSS GT-001 (bsc#1178203). - ALSA: usb-audio: Refactor endpoint management (bsc#1178203). - ALSA: usb-audio: Refactoring endpoint URB deactivation (bsc#1178203). - ALSA: usb-audio: Replace slave/master terms (bsc#1178203). - ALSA: usb-audio: Set and clear sync EP link properly (bsc#1178203). - ALSA: usb-audio: Set callbacks via snd_usb_endpoint_set_callback() (bsc#1178203). - ALSA: usb-audio: Show sync endpoint information in proc outputs (bsc#1178203). - ALSA: usb-audio: Simplify hw_params rules (bsc#1178203). - ALSA: usb-audio: Simplify quirk entries with a macro (bsc#1178203). - ALSA: usb-audio: Simplify rate_min/max and rates set up (bsc#1178203). - ALSA: usb-audio: Simplify snd_usb_init_pitch() arguments (bsc#1178203). - ALSA: usb-audio: Simplify snd_usb_init_sample_rate() arguments (bsc#1178203). - ALSA: usb-audio: Stop both endpoints properly at error (bsc#1178203). - ALSA: usb-audio: Support PCM sync_stop (bsc#1178203). - ALSA: usb-audio: Track implicit fb sync endpoint in audioformat list (bsc#1178203). - ALSA: usb-audio: Unify the code for the next packet size calculation (bsc#1178203). - ALSA: usb-audio: US16x08: fix value count for level meters (git-fixes). - ALSA: usb-audio: Use ALC1220-VB-DT mapping for ASUS ROG Strix TRX40 mobo (bsc#1178203). - ALSA: usb-audio: Use atomic_t for endpoint use_count (bsc#1178203). - ALSA: usb-audio: Use managed buffer allocation (bsc#1178203). - ALSA: usb-audio: Use unsigned char for iface and altsettings fi
Есть исправление
- Опубликовано
- Обновлено
Стек: system
Затронутые продукты и версии
kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1
Обновитесь до 5.3.18-24.46.1
kernel-default-base SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1.9.19.1
Обновитесь до 5.3.18-24.46.1.9.19.1
kernel-preempt SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1
Обновитесь до 5.3.18-24.46.1
kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1
Обновитесь до 5.3.18-24.46.1
kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1
Обновитесь до 5.3.18-24.46.1
kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1
Обновитесь до 5.3.18-24.46.1
kernel-preempt SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1
Обновитесь до 5.3.18-24.46.1
kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1
Обновитесь до 5.3.18-24.46.1
kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1
Обновитесь до 5.3.18-24.46.1
kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1
Обновитесь до 5.3.18-24.46.1
kernel-default SUSE:Linux Enterprise Live Patching 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1
Обновитесь до 5.3.18-24.46.1
kernel-livepatch-sle15-sp2_update_9 SUSE:Linux Enterprise Live Patching 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 1-5.3.1
Обновитесь до 1-5.3.1
kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1
Обновитесь до 5.3.18-24.46.1
kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.46.1
Обновитесь до 5.3.18-24.46.1
Первоисточники
- https://www.suse.com/support/update/announcement/2021/suse-su-20210117-1/
- https://bugzilla.suse.com/1040855
- https://bugzilla.suse.com/1044120
- https://bugzilla.suse.com/1044767
- https://bugzilla.suse.com/1055117
- https://bugzilla.suse.com/1065729
- https://bugzilla.suse.com/1094840
- https://bugzilla.suse.com/1109695
- https://bugzilla.suse.com/1115431
- https://bugzilla.suse.com/1138374
- https://bugzilla.suse.com/1139944
- https://bugzilla.suse.com/1149032
- https://bugzilla.suse.com/1152457
- https://bugzilla.suse.com/1152472
- https://bugzilla.suse.com/1152489
- https://bugzilla.suse.com/1155518
- https://bugzilla.suse.com/1156315
- https://bugzilla.suse.com/1156395
- https://bugzilla.suse.com/1158775
- https://bugzilla.suse.com/1161099
- https://bugzilla.suse.com/1163727
- https://bugzilla.suse.com/1165933
- https://bugzilla.suse.com/1167657
- https://osv.dev/vulnerability/SUSE-SU-2021:0117-1