SUSE-SU-2023:0145-1

SUSE-SU-2023:0145-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4662: Fixed a recursive locking violation in usb-storage that can cause the kernel to deadlock. (bsc#1206664) - CVE-2022-3564: Fixed a bug which could lead to use after free, it was found in the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. (bsc#1206073) - CVE-2022-3108: Fixed a bug in kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c where a lack of check of the return value of kmemdup() could lead to a NULL pointer dereference. (bsc#1206389) - CVE-2023-23454: Fixed a type confusion bug in the CBQ network scheduler which could lead to a use-after-free (bsc#1207036) - CVE-2022-3107: Fixed a null pointer dereference caused by a missing check of the return value of kvmalloc_array. (bsc#1206395) - CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168). The following non-security bugs were fixed: - arm64: alternative: Use true and false for boolean values (git-fixes) - arm64: cmpwait: Clear event register before arming exclusive monitor (git-fixes) - arm64: Fix minor issues with the dcache_by_line_op macro (git-fixes) - arm64: fix possible spectre-v1 in ptrace_hbp_get_event() (git-fixes) - arm64: fix possible spectre-v1 write in ptrace_hbp_set_event() (git-fixes) - arm64: ftrace: do not adjust the LR value (git-fixes) - arm64: io: Ensure calls to delay routines are ordered against prior (git-fixes) - arm64: io: Ensure value passed to __iormb() is held in a 64-bit (git-fixes) - arm64: jump_label.h: use asm_volatile_goto macro instead of 'asm (git-fixes) - arm64: make secondary_start_kernel() notrace (git-fixes) - arm64: makefile fix build of .i file in external module case (git-fixes) - arm64: ptrace: remove addr_limit manipulation (git-fixes) - arm64: rockchip: Force CONFIG_PM on Rockchip systems (git-fixes) - arm64: smp: Handle errors reported by the firmware (git-fixes) - arm64/kvm: consistently handle host HCR_EL2 flags (git-fixes) - Bluetooth: hci_qca: Fix the teardown problem for real (git-fixes). - CDC-NCM: remove 'connected' log message (git-fixes). - ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (bsc#1207195). - flexfiles: enforce per-mirror stateid only for v4 DSes (git-fixes). - flexfiles: use per-mirror specified stateid for IO (git-fixes). - fs: nfs: Fix possible null-pointer dereferences in encode_attrs() (git-fixes). - ibmveth: Always stop tx queues during close (bsc#1065729). - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (bsc#1207168). - kABI: mitigate new ufs_stats field (git-fixes). - lockd: fix decoding of TEST results (git-fixes). - media: Do not let tvp5150_get_vbi() go out of vbi_ram_default array (git-fixes). - media: i2c: tvp5150: remove useless variable assignment in tvp5150_set_vbi() (git-fixes). - memcg, kmem: further deprecate kmem.limit_in_bytes (bsc#1206896). - memcg: Fix possible use-after-free in memcg_write_event_control() (bsc#1206344). - mm, page_alloc: avoid expensive reclaim when compaction may not succeed (bsc#1204250). - module: set MODULE_STATE_GOING state when a module fails to load (git-fixes). - move new members of struct usbnet to end (git-fixes). - net :sunrpc :clnt :Fix xps refcount imbalance on the error path (git-fixes). - net: kalmia: clean up bind error path (git-fixes). - net: kalmia: fix memory leaks (git-fixes). - net: sched: atm: dont intepret cls results when asked to drop (bsc#1207036). - net: sched: cbq: dont intepret cls results when asked to drop (bsc#1207036). - net: sunrpc: Fix off-by-one issues in 'rpc_ntop6' (git-fixes). - net: usb: asix: ax88772_bind return error when hw_reset fail (git-fixes). - net: usb: asix: init MAC address buffers (git-fixes). - net: usb: qmi_wwan: add Quectel EM160R-GL (git-fixes). - net: usb: qmi_wwan: add Telit 0x103a composition (git-fixes). - net: usb: qmi_wwan: Add the BroadMobi BM818 card (git-fixes). - net: usb: qmi_wwan: add u-blox 0x1342 composition (git-fixes). - net: usb: qmi_wwan: restore mtu min/max values after raw_ip switch (git-fixes). - net: usb: qmi_wwan: Set DTR quirk for MR400 (git-fixes). - net: usb: rtl8150: demote allmulti message to dev_dbg() (git-fixes). - net/usb/kalmia: use ARRAY_SIZE for various array sizing calculations (git-fixes). - NFS Handle missing attributes in OPEN reply (bsc#1203740). - NFS: Correct size calculation for create reply length (git-fixes). - NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails (git-fixes). - NFS: Fix an Oops in nfs_d_automount() (git-fixes). - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup (git-fixes). - NFS: Fix memory leaks in nfs_pageio_stop_mirroring() (git-fixes). - NFS: Fix NULL pointer dereference of dev_name (git-fixes). - NFS: fix PNFS_FLEXFILE_LAYOUT Kconfig default (git-fixes). - NFS: nfs_compare_mount_options always compare auth flavors (git-fixes). - NFS: nfs_find_open_context() may only select open files (git-fixes). - NFS: nfs4clinet: check the return value of kstrdup() (git-fixes). - NFS: swap IO handling is slightly different for O_DIRECT IO (git-fixes). - NFS: swap-out must always use STABLE writes (git-fixes). - NFS: we do not support removing system.nfs4_acl (git-fixes). - NFS4: Fix kmemleak when allocate slot failed (git-fixes). - NFSD: allow fh_want_write to be called twice (git-fixes). - NFSD: fix a warning in __cld_pipe_upcall() (git-fixes). - NFSD: Fix svc_xprt refcnt leak when setup callback client failed (git-fixes). - NFSD: fix wrong check in write_v4_end_grace() (git-fixes). - NFSD: Keep existing listeners on portlist error (git-fixes). - NFSD: Return EPERM, not EACCES, in some SETATTR cases (git-fixes). - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data (git-fixes). - NFSD4: fix crash on writing v4_end_grace before nfsd startup (git-fixes). - NFSv2: Fix eof handling (git-fixes). - NFSv2: Fix write regression (git-fixes). - NFSv4 expose nfs_parse_server_name function (git-fixes). - NFSv4 only print the label when its queried (git-fixes). - NFSv4 remove zero number of fs_locations entries error check (git-fixes). - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes). - NFSv4: Fix open create exclusive when the server reboots (git-fixes). - NFSv4: Fix return value in nfs_finish_open() (git-fixes). - NFSv4: Fix return values for nfs4_file_open() (git-fixes). - NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation recall (git-fixes). - NFSv4.1: Fix uninitialised variable in devicenotify (git-fixes). - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes). - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes). - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes). - NFSv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes). - NFSv4.2: Fix initialisation of struct nfs4_label (git-fixes). - NFSv4.2: Fixup CLONE dest file size for zero-length count (git-fixes). - NFSv4.x: Fail client initialisation if state manager thread can't run (git-fixes). - NFSv4.x: fix lock recovery during delegation recall (git-fixes). - NFSv4/pNFS: Always return layout stats on layout return for flexfiles (git-fixes). - pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process() (git-fixes). - powerpc: Force inlining of cpu_has_feature() to avoid build failure (bsc#1065729). - powerpc: improve handling of unrecoverable system reset (bsc#1065729). - powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (bsc#1065729). - powerpc/64: Init jump labels before parse_early_param() (bsc#1065729). - powerpc/64/module: REL32 relocation range check (bsc#1065729). - powerpc/64s/hash: Fix stab_rr off by one initialization (bsc#1065729). - powerpc/64s/pgtable: fix an undefined beha

Есть исправление

Опубликовано

2023-07-06T01:12:26Z

Обновлено

2026-02-04T02:30:06.947839Z

Стек: system

Проверьте свой сервер →