SUSE-SU-2021:3748-1

SUSE-SU-2021:3748-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory (bsc#1188563). - CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349). - CVE-2021-33033: Fixed a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled (bsc#1186109). - CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rf_conn_info object (bsc#1190067). - CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673). - CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063). - CVE-2021-34556: Fixed side-channel attack via a Speculative Store Bypass via unprivileged BPF program that could have obtain sensitive information from kernel memory (bsc#1188983). - CVE-2021-35477: Fixed BPF stack frame pointer which could have been abused to disclose content of arbitrary kernel memory (bsc#1188985). - CVE-2021-42252: Fixed an issue inside aspeed_lpc_ctrl_mmap that could have allowed local attackers to access the Aspeed LPC control interface to overwrite memory in the kernel and potentially execute privileges (bnc#1190479). - CVE-2021-41864: Fixed prealloc_elems_and_freelist that allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317). - CVE-2021-42008: Fixed a slab out-of-bounds write in the decode_data function in drivers/net/hamradio/6pack.c. Input from a process that had the CAP_NET_ADMIN capability could have lead to root access (bsc#1191315). - CVE-2021-37159: Fixed use-after-free and a double free inside hso_free_net_device in drivers/net/usb/hso.c when unregister_netdev is called without checking for the NETREG_REGISTERED state (bnc#1188601). The following non-security bugs were fixed: - IB/hfi1: Fix abba locking issue with sc_disable() (git-fixes) - KVM: PPC: Book3S HV: Save host FSCR in the P7/8 path (bsc#1065729). - NFS: Do uncached readdir when we're seeking a cookie in an empty page cache (bsc#1191628). - NFS: Fix backport error - dir_cookie is a pointer to a u64, not a u64. - PM: base: power: do not try to use non-existing RTC for storing data (git-fixes). - SMB3.1.1: Fix ids returned in POSIX query dir (bsc#1190317). - SMB3.1.1: do not log warning message if server does not populate salt (bsc#1190317). - SMB3.1.1: fix mount failure to some servers when compression enabled (bsc#1190317). - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (bsc#1190317). - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (bsc#1190317). - SMB3: Add new info level for query directory (bsc#1190317). - SMB3: Add support for getting and setting SACLs (bsc#1190317). - SMB3: Fix mkdir when idsfromsid configured on mount (bsc#1190317). - SMB3: Resolve data corruption of TCP server info fields (bsc#1190317). - SMB3: add support for recognizing WSL reparse tags (bsc#1190317). - SMB3: avoid confusing warning message on mount to Azure (bsc#1190317). - SMB3: fix readpage for large swap cache (bsc#1190317). - SMB3: incorrect file id in requests compounded with open (bsc#1190317). - SMB3: update structures for new compression protocol definitions (bsc#1190317). - USB: cdc-acm: fix break reporting (git-fixes). - USB: cdc-acm: fix racy tty buffer accesses (git-fixes). - USB: iowarrior: fix control-message timeouts (git-fixes). - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (git-fixes). - USB: serial: keyspan: fix memleak on probe errors (git-fixes). - USB: serial: option: add Telit LN920 compositions (git-fixes). - USB: serial: option: add device id for Foxconn T99W265 (git-fixes). - USB: xhci: dbc: fix tty registration race (git-fixes). - bitmap: remove unused function declaration (git-fixes). - blktrace: Fix uaf in blk_trace access after removing by sysfs (bsc#1191452). - cdc_ncm: Set NTB format again after altsetting switch for Huawei devices (git-fixes). - ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1191888). - cifs: Add get_security_type_str function to return sec type (bsc#1190317). - cifs: Avoid field over-reading memcpy() (bsc#1190317). - cifs: Change SIDs in ACEs while transferring file ownership (bsc#1190317). - cifs: Clarify SMB1 code for POSIX Create (bsc#1190317). - cifs: Clarify SMB1 code for POSIX Lock (bsc#1190317). - cifs: Clarify SMB1 code for POSIX delete file (bsc#1190317). - cifs: Clarify SMB1 code for SetFileSize (bsc#1190317). - cifs: Clarify SMB1 code for UnixCreateSymLink (bsc#1190317). - cifs: Clarify SMB1 code for UnixSetPathInfo (bsc#1190317). - cifs: Clarify SMB1 code for delete (bsc#1190317). - cifs: Clarify SMB1 code for rename open file (bsc#1190317). - cifs: Display local UID details for SMB sessions in DebugData (bsc#1190317). - cifs: Do not use the original cruid when following DFS links for multiuser mounts (bsc#1190317). - cifs: Enable sticky bit with cifsacl mount option (bsc#1190317). - cifs: Fix cached_fid refcnt leak in open_shroot (bsc#1190317). - cifs: Fix chmod with modefromsid when an older ACE already exists (bsc#1190317). - cifs: Fix cifsacl ACE mask for group and others (bsc#1190317). - cifs: Fix double add page to memcg when cifs_readpages (bsc#1190317). - cifs: Fix in error types returned for out-of-credit situations (bsc#1190317). - cifs: Fix unix perm bits to cifsacl conversion for 'other' bits (bsc#1190317). - cifs: Grab a reference for the dentry of the cached directory during the lifetime of the cache (bsc#1190317). - cifs: If a corrupted DACL is returned by the server, bail out (bsc#1190317). - cifs: Make extract_hostname function public (bsc#1190317). - cifs: Make extract_sharename function public (bsc#1190317). - cifs: Print the address and port we are connecting to in generic_ip_connect() (bsc#1190317). - cifs: Retain old ACEs when converting between mode bits and ACL (bsc#1190317). - cifs: Silently ignore unknown oplock break handle (bsc#1190317). - cifs: add FALLOC_FL_INSERT_RANGE support (bsc#1190317). - cifs: add a function to get a cached dir based on its dentry (bsc#1190317). - cifs: add a timestamp to track when the lease of the cached dir was taken (bsc#1190317). - cifs: add shutdown support (bsc#1190317). - cifs: add support for FALLOC_FL_COLLAPSE_RANGE (bsc#1190317). - cifs: added WARN_ON for all the count decrements (bsc#1190317). - cifs: ask for more credit on async read/write code paths (bsc#1190317). - cifs: avoid extra calls in posix_info_parse (bsc#1190317). - cifs: check pointer before freeing (bsc#1190317). - cifs: check the timestamp for the cached dirent when deciding on revalidate (bsc#1190317). - cifs: clarify SMB1 code for UnixCreateHardLink (bsc#1190317). - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (bsc#1190317). - cifs: cleanup misc.c (bsc#1190317). - cifs: compute full_path already in cifs_readdir() (bsc#1190317). - cifs: constify path argument of ->make_node() (bsc#1190317). - cifs: constify pathname arguments in a bunch of helpers (bsc#1190317). - cifs: convert list_for_each to entry variant in cifs_debug.c (bsc#1190317). - cifs: convert list_for_each to entry variant in smb2misc.c (bsc#1190317). - cifs: convert to use be32_add_cpu() (bsc#1190317). - cifs: create sd context must be a multiple of 8 (bsc#1190317). - cifs: detect dead connections only when echoes are enabled (bsc#1190317). - cifs: do not fail __smb_send_rqst if non-fatal signals are pending (bsc#1190317). - cifs: dump Security Type info in DebugData (bsc#1190317). - cifs: fix DFS mount with cifsacl/modefromsid (bsc#1190317). - cifs: fix NULL dereference in smb2_check_mess

Есть исправление

Опубликовано

2021-11-19T16:17:29Z

Обновлено

2026-02-04T02:40:38.561187Z

Стек: system

Проверьте свой сервер →