SUSE-SU-2024:0484-1

SUSE-SU-2024:0484-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation (bsc#1219434). - CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689). - CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race condition (bsc#1218730). - CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment (bsc#1218836). - CVE-2021-33631: Fixed an integer overflow in ext4_write_inline_data_end() (bsc#1219412). - CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code inside the brcm80211 component (bsc#1216702). - CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c (bsc#1219120). - CVE-2024-0775: Fixed use-after-free in __ext4_remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219053). - CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function (bsc#1218752). - CVE-2023-51782: Fixed use-after-free in rose_ioctl in net/rose/af_rose.c because of a rose_accept race condition (bsc#1218757). - CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). - CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988). - CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989). - CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987). - CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128). The following non-security bugs were fixed: - 9p: missing chunk of 'fs/9p: Do not update file type when updating file attributes' (git-fixes). - ACPICA: Avoid cache flush inside virtual machines (git-fixes). - GFS2: Flush the GFS2 delete workqueue before stopping the kernel threads (git-fixes). - KVM: s390: vsie: Fix STFLE interpretive execution identification (git-fixes bsc#1219022). - UAPI: ndctl: Fix g++-unsupported initialisation in headers (git-fixes). - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes). - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes). - USB: serial: option: add entry for Sierra EM9191 with new firmware (git-fixes). - USB: serial: option: fix FM101R-GL defines (git-fixes). - acpi/nfit: Require opt-in for read-only label configurations (git-fixes). - acpi/nfit: improve bounds checking for 'func' (git-fixes). - affs: fix basic permission bits to actually work (git-fixes). - aio: fix mremap after fork null-deref (git-fixes). - asix: Add check for usbnet_get_endpoints (git-fixes). - bnxt_en: Log unknown link speed appropriately (git-fixes). - build: Limit kernel-source build to architectures for which the kernel binary is built (bsc#1108281). - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1219445). - chardev: fix error handling in cdev_device_add() (git-fixes). - configfs: fix a deadlock in configfs_symlink() (git-fixes). - configfs: fix a race in configfs_{,un}register_subsystem() (git-fixes). - configfs: fix a use-after-free in __configfs_open_file (git-fixes). - configfs: fix config_item refcnt leak in configfs_rmdir() (git-fixes). - configfs: fix memleak in configfs_release_bin_file (git-fixes). - configfs: new object reprsenting tree fragments (git-fixes). - configfs: provide exclusion between IO and removals (git-fixes). - configfs: stash the data we need into configfs_buffer at open time (git-fixes). - docs: Store the old kernel changelog entries in kernel-docs package (bsc#1218713). - ext4: Avoid freeing inodes on dirty list (bsc#1216989). - ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889). - fat: add ratelimit to fat*_ent_bread() (git-fixes). - fs/exofs: fix potential memory leak in mount option parsing (git-fixes). - fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters() (git-fixes). - fs/fat/file.c: issue flush after the writeback of FAT (git-fixes). - fs/file.c: initialize init_files.resize_wait (git-fixes). - fs: do not audit the capability check in simple_xattr_list() (git-fixes). - fs: ocfs2: namei: check return value of ocfs2_add_entry() (git-fixes). - fs: orangefs: fix error return code of orangefs_revalidate_lookup() (git-fixes). - fs: ratelimit __find_get_block_slow() failure message (git-fixes). - fs: warn about impending deprecation of mandatory locks (git-fixes). - gfs2: Allow lock_nolock mount to specify jid=X (git-fixes). - gfs2: Check sb_bsize_shift after reading superblock (git-fixes). - gfs2: Do not call dlm after protocol is unmounted (git-fixes). - gfs2: Do not set GFS2_RDF_UPTODATE when the lvb is updated (git-fixes). - gfs2: Do not skip dlm unlock if glock had an lvb (git-fixes). - gfs2: Fix inode height consistency check (git-fixes). - gfs2: Fix lru_count going negative (git-fixes). - gfs2: Fix marking bitmaps non-full (git-fixes). - gfs2: Fix possible data races in gfs2_show_options() (git-fixes). - gfs2: Fix sign extension bug in gfs2_update_stats (git-fixes). - gfs2: Fix use-after-free in gfs2_glock_shrink_scan (git-fixes). - gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free (git-fixes). - gfs2: Make sure FITRIM minlen is rounded up to fs block size (git-fixes). - gfs2: Special-case rindex for gfs2_grow (git-fixes). - gfs2: Wake up when sd_glock_disposal becomes zero (git-fixes). - gfs2: add validation checks for size of superblock (git-fixes). - gfs2: assign rgrp glock before compute_bitstructs (git-fixes). - gfs2: check for empty rgrp tree in gfs2_ri_update (git-fixes). - gfs2: check for live vs. read-only file system in gfs2_fitrim (git-fixes). - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (git-fixes). - gfs2: fix use-after-free on transaction ail lists (git-fixes). - gfs2: ignore negated quota changes (git-fixes). - gfs2: initialize transaction tr_ailX_lists earlier (git-fixes). - gfs2: report 'already frozen/thawed' errors (git-fixes). - gfs2: take jdata unstuff into account in do_grow (git-fixes). - gfs2_atomic_open(): fix O_EXCL|O_CREAT handling on cold dcache (git-fixes). - gtp: change NET_UDP_TUNNEL dependency to select (git-fixes). - help_next should increase position index (git-fixes). - iomap: sub-block dio needs to zeroout beyond EOF (git-fixes). - kernfs: Separate kernfs_pr_cont_buf and rename_lock (git-fixes). - kernfs: bring names in comments in line with code (git-fixes). - kernfs: fix use-after-free in __kernfs_remove (git-fixes). - libceph: use kernel_connect() (bsc#1219446). - libnvdimm/btt: Fix LBA masking during 'free list' population (git-fixes). - libnvdimm/btt: Fix a kmemdup failure check (git-fixes). - libnvdimm/btt: Remove unnecessary code in btt_freelist_init (git-fixes). - libnvdimm/btt: fix variable 'rc' set but not used (git-fixes). - libnvdimm/namespace: Fix a potential NULL pointer dereference (git-fixes). - libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value (git-fixes). - libnvdimm/pmem: Delete include of nd-core.h (git-fixes). - libnvdimm/pmem: fix a possible OOB access when read and write pmem (git-fixes). - libnvdimm/region: Fix label activation vs errors (git-fixes). - libnvdimm: Fix compilation warnings with W=1 (git-fixes). - libnvdimm: Out of bounds read in __nd_ioctl() (git-fixes). - libnvdimm: Validate command family indices (git-fixes). - libnvdimm: cover up changes in struct

Есть исправление

Опубликовано

2024-02-15T12:51:27Z

Обновлено

2026-02-04T02:23:05.390311Z

Стек: system

Проверьте свой сервер →