SUSE-SU-2021:1595-1

SUSE-SU-2021:1595-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue within virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bnc#1184509). - CVE-2021-29650: Fixed an issue within the netfilter subsystem that allowed attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value (bnc#1184208). - CVE-2021-29155: Fixed an issue within kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations (bnc#1184942). - CVE-2020-36310: Fixed an issue within arch/x86/kvm/svm/svm.c that allowed a set_memory_region_test infinite loop for certain nested page faults (bnc#1184512). - CVE-2021-28950: Fixed an issue within fs/fuse/fuse_i.h where a 'stall on CPU' could have occured because a retry loop continually finds the same bad inode (bnc#1184194, bnc#1184211). - CVE-2020-36322: Fixed an issue within the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bnc#1184211, bnc#1184952). - CVE-2021-3444: Fixed incorrect mod32 BPF verifier truncation (bsc#1184170). The following non-security bugs were fixed: - arm64: PCI: mobiveil: remove driver Prepare to replace it with upstreamed driver - blk-settings: align max_sectors on 'logical_block_size' boundary (bsc#1185195). - block: fix use-after-free on cached last_lookup partition (bsc#1181062). - block: recalculate segment count for multi-segment discards correctly (bsc#1184724). - btrfs: fix qgroup data rsv leak caused by falloc failure (bsc#1185549). - btrfs: track qgroup released data in own variable in insert_prealloc_file_extent (bsc#1185549). - cdc-acm: fix BREAK rx code path adding necessary calls (git-fixes). - cxgb4: avoid collecting SGE_QBASE regs during traffic (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584). - drivers/perf: thunderx2_pmu: Fix memory resource error handling (git-fixes). - ext4: find old entry again if failed to rename whiteout (bsc#1184742). - ext4: fix potential error in ext4_do_update_inode (bsc#1184731). - fs: direct-io: fix missing sdio->boundary (bsc#1184736). - handle also the opposite type of race condition - i40e: Fix display statistics for veb_tc (bsc#1111981). - i40e: Fix kernel oops when i40e driver removes VF's (bsc#1101816 ). - i40e: Fix sparse warning: missing error code 'err' (jsc#SLE-4797). - ibmvnic: avoid calling napi_disable() twice (bsc#1065729). - ibmvnic: clean up the remaining debugfs data structures (bsc#1065729). - ibmvnic: Continue with reset if set link down failed (bsc#1184350 ltc#191533). - ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681 git-fixes). - ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432 git-fixes). - ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432 git-fixes). - ibmvnic: queue reset work in system_long_wq (bsc#1152457 ltc#174432 git-fixes). - ibmvnic: remove duplicate napi_schedule call in do_reset function (bsc#1065729). - ibmvnic: remove duplicate napi_schedule call in open function (bsc#1065729). - ice: Cleanup fltr list in case of allocation issues (bsc#1118661 ). - ice: Fix for dereference of NULL pointer (bsc#1118661 ). - igc: Fix Pause Frame Advertising (jsc#SLE-4799). - igc: Fix Supported Pause Frame Link Setting (jsc#SLE-4799). - igc: reinit_locked() should be called with rtnl_lock (bsc#1118657). - iopoll: introduce read_poll_timeout macro (git-fixes). - isofs: release buffer head before return (bsc#1182613). - kabi: Fix breakage in NVMe driver (bsc#1181161). - kabi: Fix nvmet error log definitions (bsc#1181161). - kabi: nvme: fix fast_io_fail_tmo (bsc#1181161). - kABI: powerpc/pseries: Add shutdown() to vio_driver and vio_bus (bsc#1184209 ltc#190917). - kernel/smp: make csdlock timeout depend on boot parameter (bsc#1180846). - libbpf: Use SOCK_CLOEXEC when opening the netlink socket (bsc#1109837). - libnvdimm/label: Return -ENXIO for no slot in __blk_label_update (bsc#1185269). - libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (bsc#1185269). - libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr (git-fixes). - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (bsc#1185041). - macros.kernel-source: Use spec_install_pre for certificate installation (boo#1182672). - mmc: sdhci-of-esdhc: make sure delay chain locked for HS400 (git-fixes). - mmc: sdhci-of-esdhc: set the sd clock divisor value above 3 (git-fixes). - mm: fix memory_failure() handling of dax-namespace metadata (bsc#1185335). - net: bcmgenet: use hardware padding of runt frames (git-fixes). - net: cxgb4: fix return error value in t4_prep_fw (git-fixes). - net: hns3: clear VF down state bit before request link status (bsc#1104353). - net/mlx5: Fix PBMC register mapping (bsc#1103990). - net/mlx5: Fix placement of log_max_flow_counter (bsc#1046303 ). - netsec: ignore 'phy-mode' device property on ACPI systems (git-fixes). - nvme: add error log page slot definition (bsc#1181161). - nvme-fabrics: allow to queue requests for live queues (bsc#1181161). - nvme-fabrics: do not check state NVME_CTRL_NEW for request acceptance (bsc#1181161). - nvme-fabrics: reject I/O to offline device (bsc#1181161). - nvme: include admin_q sync with nvme_sync_queues (bsc#1181161). - nvme: introduce 'Command Aborted By host' status code (bsc#1181161). - nvme: introduce nvme_is_fabrics to check fabrics cmd (bsc#1181161). - nvme: introduce nvme_sync_io_queues (bsc#1181161). - nvme: make fabrics command run on a separate request queue (bsc#1181161). - nvme-pci: Sync queues on reset (bsc#1181161). - nvme: prevent warning triggered by nvme_stop_keep_alive (bsc#1181161). - nvme-rdma: avoid race between time out and tear down (bsc#1181161). - nvme-rdma: avoid repeated request completion (bsc#1181161). - nvme-rdma: avoid request double completion for concurrent nvme_rdma_timeout (bsc#1181161). - nvme-rdma: fix controller reset hang during traffic (bsc#1181161). - nvme-rdma: fix possible hang when failing to set io queues (bsc#1181161). - nvme-rdma: fix timeout handler (bsc#1181161). - nvme-rdma: serialize controller teardown sequences (bsc#1181161). - nvme: Restart request timers in resetting state (bsc#1181161). - nvmet: add error-log definitions (bsc#1181161). - nvmet: add error log support for fabrics-cmd (bsc#1181161). - nvme-tcp: avoid race between time out and tear down (bsc#1181161). - nvme-tcp: avoid repeated request completion (bsc#1181161). - nvme-tcp: avoid request double completion for concurrent nvme_tcp_timeout (bsc#1181161). - nvme-tcp: fix controller reset hang during traffic (bsc#1181161). - nvme-tcp: fix possible hang when failing to set io queues (bsc#1181161). - nvme-tcp: fix timeout handler (bsc#1181161). - nvme-tcp: serialize controller teardown sequences (bsc#1181161). - nvme: unlink head after removing last namespace (bsc#1181161). - ocfs2: fix a use after free on error (bsc#1184738). - ocfs2: fix deadlock between setattr and dio_end_io_write (bsc#1185197). - PCI: mobiveil: Add 8-bit and 16-bit CSR register accessors (). - PCI: mobiveil: Add callback function for interrupt initialization (). - PCI: mobiveil: Add callback function for link up check (). - PCI: mobiveil: Add configured inbound windows counter (). - PCI: mobiveil: Add Header Type field check (). - PCI: mobiv

Есть исправление

Опубликовано

2021-05-13T11:12:08Z

Обновлено

2026-02-04T02:15:33.517319Z

Стек: system

Проверьте свой сервер →