SUSE-SU-2024:1870-1

SUSE-SU-2024:1870-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394). - CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bsc#1184509). - CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060). - CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416). - CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418). - CVE-2021-46909: Fixed PCI interrupt mapping in ARM footbridge (bsc#1220442). - CVE-2021-46938: Fixed double free of blk_mq_tag_set in dev remove after table load fails (bsc#1220554). - CVE-2021-46939: Fixed possible hung in trace_clock_global() (bsc#1220580). - CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628). - CVE-2021-46950: Fixed possible data corruption in md/raid1 when ending a failed write request (bsc#1220662). - CVE-2021-46958: Fixed race between transaction aborts and fsyncs that could lead to use-after-free in btrfs (bsc#1220521). - CVE-2021-46960: Fixed wrong error code from smb2_get_enc_key() (bsc#1220528). - CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536). - CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538). - CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572). - CVE-2021-46981: Fixed NULL pointer in flush_workqueue (bsc#1220611). - CVE-2021-46988: Fixed possible crash in userfaultfd due to unreleased page (bsc#1220706). - CVE-2021-46990: Fixed crashes when toggling entry flush barrier in powerpc/64s (bsc#1220743). - CVE-2021-46998: Fixed a use after free bug in enic_hard_start_xmit() (bsc#1220625). - CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751). - CVE-2021-47015: Fixed RX consumer index logic in the error path in bnxt_en (bsc#1220794). - CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637). - CVE-2021-47034: Fixed resolved pte update for kernel memory on radix in powerpc/64s (bsc#1220687). - CVE-2021-47045: Fixed null pointer dereference in lpfc_prep_els_iocb() (bsc#1220640). - CVE-2021-47049: Fixed Use after free in __vmbus_open() (bsc#1220692). - CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768). - CVE-2021-47056: Fixed uninitialized lock in adf_vf2pf_shutdown() (bsc#1220769). - CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742). - CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (bsc#1220745). - CVE-2021-47063: Fixed possible use-after-free in panel_bridge_detach() (bsc#1220777). - CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739). - CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829). - CVE-2021-47071: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220846). - CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850). - CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985). - CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987). - CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960). - CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532). - CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541). - CVE-2021-47114: Fixed data corruption by fallocate in ocfs2 (bsc#1221548). - CVE-2021-47117: Fixed bug on in ext4_es_cache_extent() as ext4_split_extent_at() failed (bsc#1221575). - CVE-2021-47118: Fixed possible use-after-free when initializing `cad_pid` (bsc#1221605). - CVE-2021-47119: Fixed memory leak in ext4_fill_super() (bsc#1221608). - CVE-2021-47138: Fixed possible out-of-bound memory access in cxgb4 when clearing filters (bsc#1221934). - CVE-2021-47141: Fixed possible NULL pointer dereference when freeing irqs (bsc#1221949). - CVE-2021-47142: Fixed a use-after-free in drm/amdgpu (bsc#1221952). - CVE-2021-47143: Fixed possible corruption in net/smc after failed device_add() (bsc#1221988). - CVE-2021-47150: Fixed the potential memory leak in fec_enet_init() (bsc#1221973). - CVE-2021-47153: Fixed wrongly generated interrupt on bus reset in i2c/i801 (bsc#1221969). - CVE-2021-47165: Fixed shutdown crash when component not probed in drm/meson (bsc#1221965). - CVE-2021-47166: Fixed possible corruptionb in nfs_do_recoalesce() (bsc#1221998). - CVE-2021-47167: Fixed an Oopsable condition in __nfs_pageio_add_request() (bsc#1221991). - CVE-2021-47168: Fixed an incorrect limit in filelayout_decode_layout() (bsc#1222002). - CVE-2021-47169: Fixed possible NULL pointer dereference in serial/rp2 (bsc#1222000). - CVE-2021-47171: Fixed memory leak in smsc75xx_bind() (bsc#1221994). - CVE-2021-47173: Fixed memory leak in uss720_probe() (bsc#1221993). - CVE-2021-47177: Fixed sysfs leak in alloc_iommu() (bsc#1221997). - CVE-2021-47179: Fixed a NULL pointer dereference in pnfs_mark_matching_lsegs_return() (bsc#1222001). - CVE-2021-47180: Fixed memory leak in nci_allocate_device() (bsc#1221999). - CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource() (bsc#1222660). - CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664). - CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669). - CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706). - CVE-2021-47202: Fixed NULL pointer dereferences in of_thermal_ functions (bsc#1222878) - CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516). - CVE-2022-48619: Fixed a denial-of-service issue in drivers/input/input.c (bsc#1218220). - CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366). - CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657). - CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456). - CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514). - CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320). - CVE-2023-52469: Fixed use-after-free in kv_parse_power_table() (bsc#1220411). - CVE-2023-52470: Fixed null-ptr-deref in radeon_crtc_init() (bsc#122041). - CVE-2023-52474: Fixed bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests in hfi1 (bsc#1220445). - CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703). - CVE-2023-52477: Fixed USB Hub accesses to uninitialized BOS descriptors (bsc#1220790). - CVE-2023-52486: Fixed possible use-after-free in drm (bsc#1221277). - CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836). - CVE-2023-52515: Fixed possible use-after-free in RDMA/srp (bsc#1221048). - CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927). - CVE-2023-52528: Fixed uninit-value access in __smsc75xx_read_reg() (bsc#1220843). - CVE-2023-52575: Fixed SBPB enablement for spec_rstack_overflow=off (bsc#1220871). - CVE-2023-52583: Fixed deadlock or deadcode of misusing dget() inside ceph (bsc#1221058). - CVE-2023-52587: Fixed mcast list locking in IB/ipoib (bsc#1221082). - CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088). - CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044). - CVE-2023-52598: Fixed wrong se

Есть исправление

Опубликовано

2024-05-30T14:27:09Z

Обновлено

2026-02-04T03:36:26.384359Z

Стек: system

Проверьте свой сервер →