p PatchFirst

SUSE-SU-2022:3844-1

SUSE-SU-2022:3844-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 15 SP4 kernel was updated. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960). - CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552). - CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bnc#1203987). - CVE-2022-41849: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open (bnc#1203992). - CVE-2022-41674: Fixed a DoS issue where kernel can crash on the reception of specific WiFi Frames (bsc#1203770). - CVE-2022-1263: Fixed a NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allowed an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service (bnc#1198189). - CVE-2022-32296: Fixed a bug which allowed TCP servers to identify clients by observing what source ports are used (bnc#1200288). - CVE-2022-3202: Fixed a NULL pointer dereference flaw in Journaled File System. This could allow a local attacker to crash the system or leak kernel internal information (bnc#1203389). - CVE-2022-39189: Fixed a bug in the x86 KVM subsystem which allows unprivileged guest users to compromise the guest kernel because TLB flush operations are mishandled (bnc#1203066). - CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bnc#1202095). - CVE-2022-42722: Fixed crash in beacon protection for P2P-device. (bsc#1204125) - CVE-2022-42719: Fixed MBSSID parsing use-after-free. (bsc#1204051) - CVE-2022-42721: Avoid nontransmitted BSS list corruption. (bsc#1204060) - CVE-2022-42720: Fixed BSS refcounting bugs. (bsc#1204059) The following non-security bugs were fixed: - ACPI / scan: Create platform device for CS35L41 (bsc#1203699). - ACPI: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems (bsc#1203767). - ACPI: resource: skip IRQ override on AMD Zen platforms (git-fixes). - ACPI: scan: Add CLSA0101 Laptop Support (bsc#1203699). - ACPI: utils: Add api to read _SUB from ACPI (bsc#1203699). - ALSA: aloop: Fix random zeros in capture data when using jiffies timer (git-fixes). - ALSA: core: Fix double-free at snd_card_new() (git-fixes). - ALSA: cs35l41: Check hw_config before using it (bsc#1203699). - ALSA: cs35l41: Enable Internal Boost in shared lib (bsc#1203699). - ALSA: cs35l41: Move cs35l41_gpio_config to shared lib (bsc#1203699). - ALSA: cs35l41: Unify hardware configuration (bsc#1203699). - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (git-fixes). - ALSA: hda: add Intel 5 Series / 3400 PCI DID (git-fixes). - ALSA: hda: cs35l41: Add Amp Name based on channel and index (bsc#1203699). - ALSA: hda: cs35l41: Add Boost type flag (bsc#1203699). - ALSA: hda: cs35l41: Add calls to newly added test key function (bsc#1203699). - ALSA: hda: cs35l41: Add defaulted values into dsp bypass config sequence (bsc#1203699). - ALSA: hda: cs35l41: Add initial DSP support and firmware loading (bsc#1203699). - ALSA: hda: cs35l41: Add missing default cases (bsc#1203699). - ALSA: hda: cs35l41: Add module parameter to control firmware load (bsc#1203699). - ALSA: hda: cs35l41: Add support for CS35L41 in HDA systems (bsc#1203699). - ALSA: hda: cs35l41: Add Support for Interrupts (bsc#1203699). - ALSA: hda: cs35l41: Allow compilation test on non-ACPI configurations (bsc#1203699). - ALSA: hda: cs35l41: Always configure the DAI (bsc#1203699). - ALSA: hda: cs35l41: Avoid overwriting register patch (bsc#1203699). - ALSA: hda: cs35l41: Clarify support for CSC3551 without _DSD Properties (bsc#1203699). - ALSA: hda: cs35l41: Consolidate selections under SND_HDA_SCODEC_CS35L41 (bsc#1203699). - ALSA: hda: cs35l41: Do not dereference fwnode handle (bsc#1203699). - ALSA: hda: cs35l41: Drop wrong use of ACPI_PTR() (bsc#1203699). - ALSA: hda: cs35l41: Enable GPIO2 Interrupt for CLSA0100 laptops (bsc#1203699). - ALSA: hda: cs35l41: Fix comments wrt serial-multi-instantiate reference (bsc#1203699). - ALSA: hda: cs35l41: fix double free on error in probe() (bsc#1203699). - ALSA: hda: cs35l41: Fix error in spi cs35l41 hda driver name (bsc#1203699). - ALSA: hda: cs35l41: Fix I2S params comments (bsc#1203699). - ALSA: hda: cs35l41: Handle all external boost setups the same way (bsc#1203699). - ALSA: hda: cs35l41: Improve dev_err_probe() messaging (bsc#1203699). - ALSA: hda: cs35l41: Make cs35l41_hda_remove() return void (bsc#1203699). - ALSA: hda: cs35l41: Make use of the helper function dev_err_probe() (bsc#1203699). - ALSA: hda: cs35l41: Move boost config to initialization code (bsc#1203699). - ALSA: hda: cs35l41: Move cs35l41* calls to its own symbol namespace (bsc#1203699). - ALSA: hda: cs35l41: Move external boost handling to lib for ASoC use (bsc#1203699). - ALSA: hda: cs35l41: Mute the device before shutdown (bsc#1203699). - ALSA: hda: cs35l41: Put the device into safe mode for external boost (bsc#1203699). - ALSA: hda: cs35l41: Read Speaker Calibration data from UEFI variables (bsc#1203699). - ALSA: hda: cs35l41: Remove cs35l41_hda_reg_sequence struct (bsc#1203699). - ALSA: hda: cs35l41: Remove Set Channel Map api from binding (bsc#1203699). - ALSA: hda: cs35l41: Reorganize log for playback actions (bsc#1203699). - ALSA: hda: cs35l41: Save codec object inside component struct (bsc#1203699). - ALSA: hda: cs35l41: Save Subsystem ID inside CS35L41 Driver (bsc#1203699). - ALSA: hda: cs35l41: Set Speaker Position for CLSA0100 Laptop (bsc#1203699). - ALSA: hda: cs35l41: Support CLSA0101 (bsc#1203699). - ALSA: hda: cs35l41: Support Firmware switching and reloading (bsc#1203699). - ALSA: hda: cs35l41: Support Hibernation during Suspend (bsc#1203699). - ALSA: hda: cs35l41: Support multiple load paths for firmware (bsc#1203699). - ALSA: hda: cs35l41: Support reading subsystem id from ACPI (bsc#1203699). - ALSA: hda: cs35l41: Support Speaker ID for laptops (bsc#1203699). - ALSA: hda: cs35l41: Tidyup code (bsc#1203699). - ALSA: hda: cs35l41: Use the CS35L41 HDA internal define (bsc#1203699). - ALSA: hda: Fix dependencies of CS35L41 on SPI/I2C buses (bsc#1203699). - ALSA: hda: Fix dependency on ASoC cs35l41 codec (bsc#1203699). - ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation (git-fixes). - ALSA: hda: Fix Nvidia dp infoframe (git-fixes). - ALSA: hda: hda_cs_dsp_ctl: Add apis to write the controls directly (bsc#1203699). - ALSA: hda: hda_cs_dsp_ctl: Add fw id strings (bsc#1203699). - ALSA: hda: hda_cs_dsp_ctl: Add Library to support CS_DSP ALSA controls (bsc#1203699). - ALSA: hda: intel-dsp-config: Add RaptorLake PCI IDs (jsc#PED-720). - ALSA: hda/cs8409: Add new Dolphin HW variants (bsc#1203699). - ALSA: hda/cs8409: Add Speaker Playback Switch for Cyborg (bsc#1203699). - ALSA: hda/cs8409: Add Speaker Playback Switch for Warlock (bsc#1203699). - ALSA: hda/cs8409: change cs8409_fixups v.pins initializers to static (bsc#1203699). - ALSA: hda/cs8409: Disable HSBIAS_SENSE_EN for Cyborg (bsc#1203699). - ALSA: hda/cs8409: Fix Full Scale Volume setting for all variants (bsc#1203699). - ALSA: hda/cs8409: Fix Warlock to use mono mic configuration (bsc#1203699). - ALSA: hda/cs8409: Re-order quirk table into ascending order (bsc#1203699). - ALSA: hda/cs8409: Support manual mode detection for CS42L42 (bsc#1203699). - ALSA: hda/cs8409: Support new Dolphin Variants (bsc#1203699). - ALSA: hda/cs8409: Support new Odin Variants (bsc#1203699). - ALSA: hda/cs8409: Support new Warlock MLK Variants (bsc#1203699). - ALSA: hda/cs8409: Use general cs42l42 include in cs8409 hda dr

Есть исправление

Опубликовано
Обновлено

Стек: system

Затронутые продукты и версии

  • kernel-default SUSE:Linux Enterprise Micro 5.3

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-default-base SUSE:Linux Enterprise Micro 5.3

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1.150400.24.9.5

    Обновитесь до 5.14.21-150400.24.28.1.150400.24.9.5

  • kernel-64kb SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-default-base SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1.150400.24.9.5

    Обновитесь до 5.14.21-150400.24.28.1.150400.24.9.5

  • kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-zfcpdump SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-default SUSE:Linux Enterprise Live Patching 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-livepatch-sle15-sp4_update_4 SUSE:Linux Enterprise Live Patching 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 1-150400.9.3.5

    Обновитесь до 1-150400.9.3.5

  • kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • dtb-aarch64 openSUSE:Leap 15.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-64kb openSUSE:Leap 15.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-debug openSUSE:Leap 15.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-default openSUSE:Leap 15.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-default-base openSUSE:Leap 15.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1.150400.24.9.5

    Обновитесь до 5.14.21-150400.24.28.1.150400.24.9.5

  • kernel-docs openSUSE:Leap 15.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-kvmsmall openSUSE:Leap 15.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

  • kernel-obs-build openSUSE:Leap 15.4

    Затронутые диапазоны версий
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Обновитесь до 5.14.21-150400.24.28.1

Первоисточники

Проверьте свой сервер →