p PatchFirst

SUSE-SU-2022:3779-1

SUSE-SU-2022:3779-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

The SUSE Linux Enterprise 12-SP2 kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960). - CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552). - CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677). The following non-security bugs were fixed: - x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.

Есть исправление

Опубликовано
Обновлено

Стек: system

Затронутые продукты и версии

  • kernel-default SUSE:Linux Enterprise Server 12 SP2-BCL

    Затронутые диапазоны версий
    • ECOSYSTEM: < 4.4.121-92.191.1

    Обновитесь до 4.4.121-92.191.1

  • kernel-source SUSE:Linux Enterprise Server 12 SP2-BCL

    Затронутые диапазоны версий
    • ECOSYSTEM: < 4.4.121-92.191.1

    Обновитесь до 4.4.121-92.191.1

  • kernel-syms SUSE:Linux Enterprise Server 12 SP2-BCL

    Затронутые диапазоны версий
    • ECOSYSTEM: < 4.4.121-92.191.1

    Обновитесь до 4.4.121-92.191.1

Первоисточники

Проверьте свой сервер →