SUSE-SU-2021:0742-1
SUSE-SU-2021:0742-1 · Security update for the Linux Kernel
Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.
На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bug was fixed: - CVE-2021-3348: Fixed a use-after-free read in nbd_queue_rq (bsc#1181504). The following non-security bugs were fixed: - ACPI: configfs: add missing check after configfs_register_default_group() (git-fixes). - ACPI: property: Fix fwnode string properties matching (git-fixes). - ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes). - ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (git-fixes). - arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true (bsc#1182560) - ASoC: cs42l56: fix up error handling in probe (git-fixes). - ath9k: fix data bus crash when setting nf_override via debugfs (git-fixes). - block: fix use-after-free in disk_part_iter_next (bsc#1182610). - Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function (git-fixes). - Bluetooth: drop HCI device reference before return (git-fixes). - Bluetooth: Fix initializing response id after clearing struct (git-fixes). - Bluetooth: Put HCI device if inquiry procedure interrupts (git-fixes). - bonding: Fix reference count leak in bond_sysfs_slave_add (git-fixes). - bonding: wait for sysfs kobject destruction before freeing struct slave (git-fixes). - BTRFS: Cleanup try_flush_qgroup (bsc#1182047). - BTRFS: correctly calculate item size used when item key collision happens (bsc#1181996). - BTRFS: correctly validate compression type (bsc#1182269). - BTRFS: delete the ordered isize update code (bsc#1181998). - BTRFS: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#1182047). - BTRFS: do not set path->leave_spinning for truncate (bsc#1181998). - BTRFS: factor out extent dropping code from hole punch handler (bsc#1182038). - BTRFS: fix cloning range with a hole when using the NO_HOLES feature (bsc#1182038). - BTRFS: fix data bytes_may_use underflow with fallocate due to failed quota reserve (bsc#1182130) - BTRFS: fix ENOSPC errors, leading to transaction aborts, when cloning extents (bsc#1182038). - BTRFS: fix hole extent items with a zero size after range cloning (bsc#1182038). - BTRFS: fix lost i_size update after cloning inline extent (bsc#1181998). - BTRFS: fix mount failure caused by race with umount (bsc#1182248). - BTRFS: Fix race between extent freeing/allocation when using bitmaps (bsc#1181574). - BTRFS: fix unexpected cow in run_delalloc_nocow (bsc#1181987). - BTRFS: fix unexpected failure of nocow buffered writes after snapshotting when low on space (bsc#1181987). - BTRFS: Free correct amount of space in btrfs_delayed_inode_reserve_metadata (bsc#1182047). - BTRFS: incremental send, fix file corruption when no-holes feature is enabled (bsc#1182184). - BTRFS: Introduce extent_io_tree::owner to distinguish different io_trees (bsc#1181998). - BTRFS: introduce per-inode file extent tree (bsc#1181998). - BTRFS: prepare for extensions in compression options (bsc#1182269). - BTRFS: prop: fix vanished compression property after failed set (bsc#1182269). - BTRFS: prop: fix zstd compression parameter validation (bsc#1182269). - BTRFS: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#1182047). - BTRFS: replace all uses of btrfs_ordered_update_i_size (bsc#1181998). - BTRFS: send, allow clone operations within the same file (bsc#1182173) - BTRFS: send, do not issue unnecessary truncate operations (bsc#1182173) - BTRFS: send, fix emission of invalid clone operations within the same file (bsc#1182173) - BTRFS: send, fix incorrect file layout after hole punching beyond eof (bsc#1182173). - BTRFS: send: fix invalid clone operations when cloning from the same file and root (bsc#1182173) - BTRFS: send, fix missing truncate for inode with prealloc extent past eof (bsc#1182173). - BTRFS: send, orphanize first all conflicting inodes when processing references (bsc#1182243 bsc#1182242). - BTRFS: send, recompute reference path after orphanization of a directory (bsc#1182243). - BTRFS: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#1182047). - BTRFS: transaction: Avoid deadlock due to bad initialization timing of fs_info::journal_info (bsc#1181931). - BTRFS: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047). - BTRFS: Use bd_dev to generate index when dev_state_hashtable add items (bsc#1181931). - BTRFS: use btrfs_ordered_update_i_size in clone_finish_inode_update (bsc#1181998). - BTRFS: use the file extent tree infrastructure (bsc#1181998). - cifs: report error instead of invalid when revalidating a dentry fails (bsc#1177440). - dm: avoid filesystem lookup in dm_get_dev_t() (bsc#1178049). - Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (git-fixes). - Exclude Symbols.list again. Removing the exclude builds vanilla/linux-next builds. Fixes: 55877625c800 ('kernel-binary.spec.in: Package the obj_install_dir as explicit filelist.') - ext4: do not remount read-only with errors=continue on reboot (bsc#1182464). - ext4: fix a memory leak of ext4_free_data (bsc#1182447). - ext4: fix bug for rename with RENAME_WHITEOUT (bsc#1182449). - ext4: fix deadlock with fs freezing and EA inodes (bsc#1182463). - ext4: fix superblock checksum failure when setting password salt (bsc#1182465). - fgraph: Initialize tracing_graph_pause at task creation (git-fixes). - firmware: imx: select SOC_BUS to fix firmware build (git-fixes). - Fix unsynchronized access to sev members through svm_register_enc_region (bsc#1114648). - fs: fix lazytime expiration handling in __writeback_single_inode() (bsc#1182466). - fs: move I_DIRTY_INODE to fs.h (bsc#1182612). - HID: core: detect and skip invalid inputs to snto32() (git-fixes). - HID: wacom: Ignore attempts to overwrite the touch_max value from HID (git-fixes). - hwrng: timeriomem - Fix cooldown period calculation (git-fixes). - ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#190997). - ibmvnic: device remove has higher precedence over reset (bsc#1065729). - ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293). - ibmvnic: fix login buffer memory leak (bsc#1081134 ltc#164631). - ibmvnic: serialize access to work queue on remove (bsc#1065729). - ibmvnic: Set to CLOSED state even on error (bsc#1084610 ltc#165122 git-fixes). - Input: elo - fix an error code in elo_connect() (git-fixes). - Input: joydev - prevent potential read overflow in ioctl (git-fixes). - iwlwifi: exclude GEO SAR support for 3168 (git-fixes). - kABI: Fix kABI for 12856e7acde4 PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY (bsc#1179612). - kernel-binary.spec: Add back initrd and image symlink ghosts to filelist (bsc#1182140). Fixes: 76a9256314c3 ('rpm/kernel-{source,binary}.spec: do not include ghost symlinks (boo#1179082).') - kernfs: deal with kernfs_fill_super() failures (bsc#1181809). - KVM: apic: Flush TLB after APIC mode/address change if VPIDs are in use (bsc#1182302). - KVM: Fix kABI for set_virtual_apic_mode (bsc#1182310). - KVM: Fix kABI for tlb_flush (bsc#1182195). - kvm-vmx-Basic-APIC-virtualization-controls-have-thre.patch: (bsc#1182310). - KVM: VMX: check for existence of secondary exec controls before accessing (bsc#1182438). - KVM: VMX: hide flexpriority from guest when disabled at the module level (bsc#1182448). - kvm-vmx-Introduce-lapic_mode-enumeration.patch: (bsc#1182307). - KVM: x86: emulate RDPID (bsc#1182182). - KVM: x86: emulating RDPID failure shall return #UD rather than - KVM: X86: introduce invalidate_gpa argument to tlb flush (bsc#1182195). - libfs: fix error cast of negative value in simple_attr_write() (bsc#1179709). - libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#1170442). - mac80211: fix potential overflow when multiplying to u32 integers (git-fixes). - media: cx25821: Fix a bug when reallocating some dma memory (git-fixes). - media: media/pci: Fix memleak in empress_init (git-fixes). - media: pwc: Use correct device for DMA (git-fixes). - media: px
Есть исправление
- Опубликовано
- Обновлено
Стек: system
Затронутые продукты и версии
kernel-default SUSE:Linux Enterprise High Availability Extension 12 SP5
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-122.63.1
Обновитесь до 4.12.14-122.63.1
kernel-default SUSE:Linux Enterprise Live Patching 12 SP5
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-122.63.1
Обновитесь до 4.12.14-122.63.1
kgraft-patch-sle12-sp5_update_16 SUSE:Linux Enterprise Live Patching 12 SP5
- Затронутые диапазоны версий
- ECOSYSTEM: < 1-8.3.1
Обновитесь до 1-8.3.1
kernel-docs SUSE:Linux Enterprise Software Development Kit 12 SP5
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-122.63.1
Обновитесь до 4.12.14-122.63.1
kernel-obs-build SUSE:Linux Enterprise Software Development Kit 12 SP5
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-122.63.1
Обновитесь до 4.12.14-122.63.1
kernel-default SUSE:Linux Enterprise Server 12 SP5
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-122.63.1
Обновитесь до 4.12.14-122.63.1
kernel-source SUSE:Linux Enterprise Server 12 SP5
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-122.63.1
Обновитесь до 4.12.14-122.63.1
kernel-syms SUSE:Linux Enterprise Server 12 SP5
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-122.63.1
Обновитесь до 4.12.14-122.63.1
kernel-default SUSE:Linux Enterprise Server for SAP Applications 12 SP5
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-122.63.1
Обновитесь до 4.12.14-122.63.1
kernel-source SUSE:Linux Enterprise Server for SAP Applications 12 SP5
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-122.63.1
Обновитесь до 4.12.14-122.63.1
kernel-syms SUSE:Linux Enterprise Server for SAP Applications 12 SP5
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-122.63.1
Обновитесь до 4.12.14-122.63.1
kernel-default SUSE:Linux Enterprise Workstation Extension 12 SP5
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-122.63.1
Обновитесь до 4.12.14-122.63.1
Первоисточники
- https://www.suse.com/support/update/announcement/2021/suse-su-20210742-1/
- https://bugzilla.suse.com/1065600
- https://bugzilla.suse.com/1065729
- https://bugzilla.suse.com/1078720
- https://bugzilla.suse.com/1081134
- https://bugzilla.suse.com/1084610
- https://bugzilla.suse.com/1114648
- https://bugzilla.suse.com/1163617
- https://bugzilla.suse.com/1163930
- https://bugzilla.suse.com/1169514
- https://bugzilla.suse.com/1170442
- https://bugzilla.suse.com/1176855
- https://bugzilla.suse.com/1177440
- https://bugzilla.suse.com/1178049
- https://bugzilla.suse.com/1179082
- https://bugzilla.suse.com/1179142
- https://bugzilla.suse.com/1179612
- https://bugzilla.suse.com/1179709
- https://bugzilla.suse.com/1180058
- https://bugzilla.suse.com/1181346
- https://bugzilla.suse.com/1181504
- https://bugzilla.suse.com/1181574
- https://bugzilla.suse.com/1181671
- https://osv.dev/vulnerability/SUSE-SU-2021:0742-1