SUSE-SU-2022:1196-1

SUSE-SU-2022:1196-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197227) - CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel. (bnc#1198033) - CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel. (bnc#1198031) - CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel. (bnc#1198032) - CVE-2022-0812: Fixed an incorrect header size calculations which could lead to a memory leak. (bsc#1196639) - CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock. (bsc#1197331) - CVE-2022-0850: Fixed a kernel information leak vulnerability in iov_iter.c. (bsc#1196761) - CVE-2022-26966: Fixed an issue in drivers/net/usb/sr9700.c, which allowed attackers to obtain sensitive information from the memory via crafted frame lengths from a USB device. (bsc#1196836) - CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-after-free if there is a corrupted quota file. (bnc#1197366) - CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free. (bnc#1196973) - CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040,CVE-2022-23041,CVE-2022-23042: Fixed multiple issues which could have lead to read/write access to memory pages or denial of service. These issues are related to the Xen PV device frontend drivers. (bsc#1196488) - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could crash the system or corrupt the system memory. (bsc#1196830) - CVE-2022-0001,CVE-2022-0002,CVE-2022-23960: Fixed a new kind of speculation issues, exploitable via JITed eBPF for instance. (bsc#1191580) - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197462) The following non-security bugs were fixed: - asix: Add rx->ax_skb = NULL after usbnet_skb_return() (git-fixes). - asix: Ensure asix_rx_fixup_info members are all reset (git-fixes). - asix: Fix small memory leak in ax88772_unbind() (git-fixes). - asix: fix uninit-value in asix_mdio_read() (git-fixes). - asix: fix wrong return value in asix_check_host_enable() (git-fixes). - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (bsc#1196018). - block: bfq: fix bfq_set_next_ioprio_data() (bsc#1191451). - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) (bsc#1194586). - can: dev: can_restart: fix use after free bug (git-fixes). - cgroup: Correct privileges check in release_agent writes (bsc#1196723). - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv (bsc#1196723). - cgroup: Use open-time cgroup namespace for process migration perm checks (bsc#1196723). - dax: update to new mmu_notifier semantic (bsc#1184207). - drm: add a locked version of drm_is_current_master (bsc#1197914). - drm: drm_file struct kABI compatibility workaround (bsc#1197914). - drm: protect drm_master pointers in drm_lease.c (bsc#1197914). - drm: serialize drm_file.master with a new spinlock (bsc#1197914). - drm: use the lookup lock in drm_is_current_master (bsc#1197914). - EDAC: Fix calculation of returned address and next offset in edac_align_ptr() (bsc#1114648). - ena_netdev: use generic power management (bsc#1197099 jsc#SLE-24125). - ena: Remove rcu_read_lock() around XDP program invocation (bsc#1197099 jsc#SLE-24125). - ethernet: amazon: ena: A typo fix in the file ena_com.h (bsc#1197099 jsc#SLE-24125). - ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1197754). - ext4: check for inconsistent extents between index and leaf block (bsc#1194163 bsc#1196339). - ext4: check for out-of-order index extents in ext4_valid_extent_entries() (bsc#1194163 bsc#1196339). - ext4: do not use the orphan list when migrating an inode (bsc#1197756). - ext4: fix an use-after-free issue about data=journal writeback mode (bsc#1195482). - ext4: Fix BUG_ON in ext4_bread when write quota data (bsc#1197755). - ext4: fix error handling in ext4_restore_inline_data() (bsc#1197757). - ext4: fix lazy initialization next schedule time computation in more granular unit (bsc#1194580). - ext4: make sure quota gets properly shutdown on error (bsc#1195480). - ext4: prevent partial update of the extent blocks (bsc#1194163 bsc#1196339). - ext4: update i_disksize if direct write past ondisk size (bsc#1197806). - genirq: Use rcu in kstat_irqs_usr() (bsc#1193738). - gtp: fix an use-before-init in gtp_newlink() (git-fixes). - IB/core: Fix ODP get user pages flow (git-fixes) - IB/hfi1: Acquire lock to release TID entries when user file is closed (git-fixes) - IB/hfi1: Adjust pkey entry in index 0 (git-fixes) - IB/hfi1: Correct guard on eager buffer deallocation (git-fixes) - IB/hfi1: Ensure pq is not left on waitlist (git-fixes) - IB/hfi1: Fix another case where pq is left on waitlist (git-fixes) - IB/hfi1: Fix error return code in parse_platform_config() (git-fixes) - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (git-fixes) - IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() (git-fixes) - IB/hfi1: Insure use of smp_processor_id() is preempt disabled (git-fixes) - IB/hfi1: Use kzalloc() for mmu_rb_handler allocation (git-fixes) - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields (git-fixes) - IB/qib: Use struct_size() helper (git-fixes) - IB/sa: Resolv use-after-free in ib_nl_make_request() (git-fixes) - IB/umad: Return EIO in case of when device disassociated (git-fixes) - IB/umad: Return EPOLLERR in case of when device disassociated (git-fixes) - isofs: Fix out of bound access for corrupted isofs image (bsc#1194591). - llc: fix netdevice reference leaks in llc_ui_bind() (git-fixes). - macros.kernel-source: Fix conditional expansion. Fixes: bb95fef3cf19 ('rpm: Use bash for %() expansion (jsc#SLE-18234).') - mdio: fix mdio-thunder.c dependency build error (git-fixes). - mm: bdi: initialize bdi_min_ratio when bdi is unregistered (bsc#1197763). - mm: drop NULL return check of pte_offset_map_lock() (bsc#1184207). - mm/rmap: always do TTU_IGNORE_ACCESS (bsc#1184207). - mm/rmap: update to new mmu_notifier semantic v2 (bsc#1184207). - net: arc_emac: Fix memleak in arc_mdio_probe (git-fixes). - net: asix: add proper error handling of usb read errors (git-fixes). - net: asix: fix uninit value bugs (git-fixes). - net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (git-fixes). - net: dp83867: Fix OF_MDIO config check (git-fixes). - net: dsa: bcm_sf2: put device node before return (git-fixes). - net: ena: Add capabilities field with support for ENI stats capability (bsc#1197099 jsc#SLE-24125). - net: ena: Add debug prints for invalid req_id resets (bsc#1197099 jsc#SLE-24125). - net: ena: add device distinct log prefix to files (bsc#1197099 jsc#SLE-24125). - net: ena: add jiffies of last napi call to stats (bsc#1197099 jsc#SLE-24125). - net: ena: aggregate doorbell common operations into a function (bsc#1197099 jsc#SLE-24125). - net: ena: aggregate stats increase into a function (bsc#1197099 jsc#SLE-24125). - net: ena: Change ENI stats support check to use capabilities field (bsc#1197099 jsc#SLE-24125). - net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1197099 jsc#SLE-24125). - net: ena: Change the name of bad_csum variable (bsc#1197099 jsc#SLE-24125). - net: ena: Extract recurring driver reset code into a f

Есть исправление

Опубликовано

2022-04-14T06:56:48Z

Обновлено

2026-02-04T03:45:32.095244Z

Стек: system

Проверьте свой сервер →