SUSE-SU-2024:2184-1

SUSE-SU-2024:2184-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487). - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513). - CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854). - CVE-2021-47113: Abort btrfs rename_exchange if we fail to insert the second ref (bsc#1221543). - CVE-2021-47131: Fixed a use-after-free after the TLS device goes down and up (bsc#1221545). - CVE-2021-47206: Check return value after calling platform_get_resource() (bsc#1222894). - CVE-2021-47238: Fixed memory leak in ip_mc_add1_src (bsc#1224847) - CVE-2021-47245: Fixed out of bounds when parsing TCP options (bsc#1224838) - CVE-2021-47246: Fixed page reclaim for dead peer hairpin (CVE-2021-47246 bsc#1224831). - CVE-2021-47249: Fixed memory leak in rds_recvmsg (bsc#1224880) - CVE-2021-47250: Fixed memory leak in netlbl_cipsov4_add_std (bsc#1224827) - CVE-2021-47265: Verify port when creating flow rule (bsc#1224957) - CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960). - CVE-2021-47281: Fixed race of snd_seq_timer_open() (bsc#1224983). - CVE-2021-47334: Fixed two use after free in ibmasm_init_one (bsc#1225112). - CVE-2021-47352: Add validation for used length (bsc#1225124). - CVE-2021-47355: Fixed possible use-after-free in nicstar_cleanup() (bsc#1225141). - CVE-2021-47357: Fixed possible use-after-free in ia_module_exit() (bsc#1225144). - CVE-2021-47361: Fixed error handling in mcb_alloc_bus() (bsc#1225151). - CVE-2021-47362: Update intermediate power state for SI (bsc#1225153). - CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201). - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225208). - CVE-2021-47397: Break out if skb_header_pointer returns NULL in sctp_rcv_ootb (bsc#1225082) - CVE-2021-47401: Fixed stack information leak (bsc#1225242). - CVE-2021-47423: Fixed file release memory leak (bsc#1225366). - CVE-2021-47431: Fixed gart.bo pin_count leak (bsc#1225390). - CVE-2021-47469: Add SPI fix commit to be ignored (bsc#1225347) - CVE-2021-47483: Fixed possible double-free in regcache_rbtree_exit() (bsc#1224907). - CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354) - CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355). - CVE-2021-47500: Fixed trigger reference couting (bsc#1225360). - CVE-2021-47509: Limit the period size to 16MB (bsc#1225409). - CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411). - CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506) - CVE-2022-48672: Fixed off-by-one error in unflatten_dt_nodes() (CVE-2022-48672 bsc#1223931). - CVE-2022-48686: Fixed UAF when detecting digest errors (bsc#1223948). - CVE-2022-48697: Fixed a use-after-free (bsc#1223922). - CVE-2022-48702: Fixed out of bounds access in snd_emu10k1_pcm_channel_alloc() (bsc#1223923). - CVE-2022-48704: Add a force flush to delay work when radeon (bsc#1223932) - CVE-2022-48708: Fixed potential NULL dereference (bsc#1224942). - CVE-2022-48710: Fixed a possible null pointer dereference (bsc#1225230). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335). - CVE-2023-42755: Check user supplied offsets (bsc#1215702). - CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081). - CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169). - CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747). - CVE-2023-52691: Fixed a double-free in si_dpm_init (bsc#1224607). - CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621) - CVE-2023-52730: Fixed possible resource leaks in some error paths (bsc#1224956). - CVE-2023-52732: Blocklist the kclient when receiving corrupted snap trace (bsc#1225222). - CVE-2023-52747: Restore allocated resources on failed copyout (bsc#1224931) - CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930). - CVE-2023-52821: Fixed a possible null pointer dereference (bsc#1225022). - CVE-2023-52864: Fixed opening of char device (bsc#1225132). - CVE-2023-52865: Add check for mtk_alloc_clk_data (bsc#1225086). - CVE-2023-52867: Fixed possible buffer overflow (bsc#1225009). - CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096). - CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917). - CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) - CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627). - CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793) - CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084). - CVE-2024-26846: Do not wait in vain when unloading module (bsc#1223023). - CVE-2024-26874: Fixed a null pointer crash in (bsc#1223048) - CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119). - CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046). - CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207) - CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138). - CVE-2024-26957: Fixed reference counting on zcrypt card objects (bsc#1223666). - CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653). - CVE-2024-26984: Fixed instmem race condition around ptr stores (bsc#1223633) - CVE-2024-26996: Fixed UAF ncm object at re-bind after usb ep transport error (bsc#1223752). - CVE-2024-27008: Fixed out of bounds access (CVE-2024-27008 bsc#1223802). - CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834). - CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096). - CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174). - CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181). - CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759) - CVE-2024-27436: Stop parsing channels bits when all channels are found (bsc#1224803). - CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749). - CVE-2024-35791: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (bsc#1224725). - CVE-2024-35809: Drain runtime-idle callbacks before driver removal (bsc#1224738). - CVE-2024-35830: Register v4l2 async device only after successful setup (bsc#1224680). - CVE-2024-35849: Fixed information leak in btrfs_ioctl_logical_to_ino() (bsc#1224733). - CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525). - CVE-2024-35878: Prevent NULL pointer dereference in vsnprintf() (bsc#1224671). - CVE-2024-35887: Fixed use-after-free bugs caused by ax25_ds_del_timer (bsc#1224663) - CVE-2024-35932: Do not check if plane->state->fb == state->fb (bsc#1224650). - CVE-2024-35935: Handle path ref underflow in header iterate_inode_ref() (bsc#1224645) - CVE-2024-35936: Add missing mutex_unlock in btrfs_relocate_sys_chunks() (bsc#1224644) - CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648). - CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580). - CVE-2024-35982: Avoid infinite loop trying to resize local TT (bsc#1224566) - CVE-2024-36029: Prevent access to suspended controller (bsc#1225708) The following non-security bugs were fixed: - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384). - af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384). - af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384). - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (git-fixes). - assoc_array: Fix BUG_ON during garbage collect. - autofs: fix a leak in autofs_expire_indirect() (git-fixes) - Bluetooth: btusb: Some Qua

Есть исправление

Опубликовано

2024-06-24T18:34:20Z

Обновлено

2026-02-04T02:22:33.446640Z

Стек: system

Проверьте свой сервер →