SUSE-SU-2024:0160-1

SUSE-SU-2024:0160-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN (bsc#1179610 bsc#1215237). - CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218559). - CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250). - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447). - CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1218335). - CVE-2023-6606: Fixed an out-of-bounds read vulnerability in smbCalcSize in fs/smb/client/netmisc.c that could allow a local attacker to crash the system or leak internal kernel information (bsc#1217947). - CVE-2023-6610: Fixed an out-of-bounds read vulnerability in smb2_dump_detail in fs/smb/client/smb2ops.c that could allow a local attacker to crash the system or leak internal kernel information (bsc#1217946). - CVE-2023-6622: Fixed a null pointer dereference vulnerability in nft_dynset_init() that could allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service (bsc#1217938). - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258). - CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253). The following non-security bugs were fixed: - Documentation: KVM: add separate directories for architecture-specific documentation (jsc#PED-7167). - Documentation: KVM: update amd-memory-encryption.rst references (jsc#PED-7167). - Documentation: KVM: update msr.rst reference (jsc#PED-7167). - Documentation: KVM: update s390-diag.rst reference (jsc#PED-7167). - Documentation: KVM: update s390-pv.rst reference (jsc#PED-7167). - Documentation: drop more IDE boot options and ide-cd.rst (git-fixes). - Documentation: qat: Use code block for qat sysfs example (git-fixes). - Drop Documentation/ide/ (git-fixes). - Fix crash in vmw_context_cotables_unref when 3d support is enabled (bsc#1218738) - Fix crash on screen resize (bsc#1218229) - Fix drm gem object underflow (bsc#1218092) - Revert 'PCI/ASPM: Remove pcie_aspm_pm_state_change()' (git-fixes). - Revert 'PCI: acpiphp: Reassign resources on bridge if necessary' (git-fixes). - Revert 'md: unlock mddev before reap sync_thread in action_store' (git-fixes). - Revert 'swiotlb: panic if nslabs is too small' (git-fixes). - Revert 'xhci: Loosen RPM as default policy to cover for AMD xHC 1.1' (git-fixes). - Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces - acpi: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (git-fixes). - acpi: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects (git-fixes). - acpica: Add AML_NO_OPERAND_RESOLVE flag to Timer (git-fixes). - afs: Fix afs_server_list to be cleaned up with RCU (git-fixes). - afs: Fix dynamic root lookup DNS check (git-fixes). - afs: Fix file locking on R/O volumes to operate in local mode (git-fixes). - afs: Fix overwriting of result of DNS query (git-fixes). - afs: Fix refcount underflow from error handling race (git-fixes). - afs: Fix the dynamic root's d_delete to always delete unused dentries (git-fixes). - afs: Fix use-after-free due to get/remove race in volume tree (git-fixes). - afs: Make error on cell lookup failure consistent with OpenAFS (git-fixes). - afs: Return ENOENT if no cell DNS record can be found (git-fixes). - alsa: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro (git-fixes). - alsa: hda/hdmi: add force-connect quirk for NUC5CPYB (git-fixes). - alsa: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants (git-fixes). - alsa: hda/realtek: Add Framework laptop 16 to quirks (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GV302XA (git-fixes). - alsa: hda/realtek: Add supported ALC257 for ChromeOS (git-fixes). - alsa: hda/realtek: Apply mute LED quirk for HP15-db (git-fixes). - alsa: hda/realtek: Enable headset on Lenovo M90 Gen5 (git-fixes). - alsa: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 (git-fixes). - alsa: hda/realtek: Headset Mic VREF to 100% (git-fixes). - alsa: hda/realtek: add new Framework laptop to quirks (git-fixes). - alsa: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs for a HP ZBook (git-fixes). - alsa: hda/realtek: fix speakers on XPS 9530 (2023) (git-fixes). - alsa: hda: intel-dsp-cfg: add LunarLake support (git-fixes). - alsa: pcm: fix out-of-bounds in snd_pcm_state_names (git-fixes). - alsa: seq: oss: Fix racy open/close of MIDI devices (git-fixes). - alsa: usb-audio: Add Pioneer DJM-450 mixer controls (git-fixes). - alsa: usb-audio: Increase delay in MOTU M quirk (git-fixes). - apparmor: Free up __cleanup() name (jsc#PED-7167). - arm64: dts: arm: add missing cache properties (git-fixes) - arm64: dts: imx8mm: Add sound-dai-cells to micfil node (git-fixes) - arm64: dts: imx8mn: Add sound-dai-cells to micfil node (git-fixes) - arm64: dts: imx8mq-librem5: Remove dis_u3_susphy_quirk from (git-fixes) - arm64: kdump: Skip kmemleak scan reserved memory for kdump (jsc#PED-7167). - arm64: mm: Fix 'rodata=on' when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y (git-fixes) - arm: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init (git-fixes). - arm: PL011: Fix DMA support (git-fixes). - asoc: fsl_rpmsg: Fix error handler with pm_runtime_enable (git-fixes). - asoc: hdmi-codec: fix missing report for jack initial status (git-fixes). - asoc: meson: g12a-toacodec: Fix event generation (git-fixes). - asoc: meson: g12a-toacodec: Validate written enum values (git-fixes). - asoc: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux (git-fixes). - asoc: meson: g12a-tohdmitx: Validate written enum values (git-fixes). - asoc: wm_adsp: fix memleak in wm_adsp_buffer_populate (git-fixes). - bitmap: unify find_bit operations (jsc#PED-7167). - block: fix revalidate performance regression (bsc#1216057). - bluetooth: Fix deadlock in vhci_send_frame (git-fixes). - bluetooth: L2CAP: Send reject on command corrupted request (git-fixes). - bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE (git-fixes). - bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921 (bsc#1218461). - bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (git-fixes). - bluetooth: hci_event: shut up a false-positive warning (git-fixes). - bluetooth: hci_qca: Fix the teardown problem for real (git-fixes). - bnxt: do not handle XDP in netpoll (jsc#PED-1495). - bnxt_en: Clear resource reservation during resume (jsc#PED-1495). - bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic (jsc#PED-1495). - bnxt_en: Fix max_mtu setting for multi-buf XDP (jsc#PED-1495). - bnxt_en: Fix page pool logic for page size >= 64K (jsc#PED-1495). - bnxt_en: Fix wrong return value check in bnxt_close_nic() (jsc#PED-1495). - bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI (jsc#PED-1495). - bpf: Adjust insufficient default bpf_jit_limit (bsc#1218234 git-fixes). - bus: ti-sysc: Flush posted write only after srst_udelay (git-fixes). - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1217980). - ceph: fix type promotion bug on 32bit systems (bsc#1217982). - cleanup: Make no_free_ptr() __must_check (jsc#PED-7167). - clocksource:

Есть исправление

Опубликовано

2024-01-18T17:04:28Z

Обновлено

2026-02-04T03:50:42.822944Z

Стек: system

Проверьте свой сервер →