SUSE-SU-2024:2561-1

SUSE-SU-2024:2561-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988). - CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010). - CVE-2021-47145: btrfs: do not BUG_ON in link_to_fixup_dir (bsc#1222005). - CVE-2021-47191: Fix out-of-bound read in resp_readcap16() (bsc#1222866). - CVE-2021-47201: iavf: free q_vectors before queues in iavf_disable_vf (bsc#1222792). - CVE-2021-47267: usb: fix various gadget panics on 10gbps cabling (bsc#1224993). - CVE-2021-47270: usb: fix various gadgets null ptr deref on 10gbps cabling (bsc#1224997). - CVE-2021-47275: bcache: avoid oversized read request in cache missing code path (bsc#1224965). - CVE-2021-47293: net/sched: act_skbmod: Skip non-Ethernet packets (bsc#1224978). - CVE-2021-47294: netrom: Decrease sock refcount when sock timers expire (bsc#1224977). - CVE-2021-47297: net: fix uninit-value in caif_seqpkt_sendmsg (bsc#1224976). - CVE-2021-47309: net: validate lwtstate->data before returning from skb_tunnel_info() (bsc#1224967). - CVE-2021-47328: blacklist.conf: bsc#1225047 CVE-2021-47328: breaks kABI Also, does not apply. - CVE-2021-47354: drm/sched: Avoid data corruptions (bsc#1225140) - CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184). - CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203). - CVE-2021-47407: KVM: x86: Handle SRCU initialization failure during page track init (bsc#1225306). - CVE-2021-47418: net_sched: fix NULL deref in fifo_set_limit() (bsc#1225337). - CVE-2021-47434: xhci: Fix commad ring abort, write all 64 bits to CRCR register (bsc#1225232). - CVE-2021-47438: net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (bsc#1225229) - CVE-2021-47445: drm/msm: Fix null pointer dereference on pointer edp (bsc#1225261) - CVE-2021-47498: dm rq: do not queue request to blk-mq during DM suspend (bsc#1225357). - CVE-2021-47518: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (bsc#1225372). - CVE-2021-47520: can: pch_can: pch_can_rx_normal: fix use after free (bsc#1225431). - CVE-2021-47544: tcp: fix page frag corruption on page fault (bsc#1225463). - CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505). - CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514). - CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518). - CVE-2021-47587: net: systemport: Add global locking for descriptor lifecycle (bsc#1226567). - CVE-2021-47602: mac80211: track only QoS data frames for admission control (bsc#1226554). - CVE-2021-47609: firmware: arm_scpi: Fix string overflow in SCPI genpd driver (bsc#1226562) - CVE-2022-48732: drm/nouveau: fix off by one in BIOS boundary checking (bsc#1226716) - CVE-2022-48733: btrfs: fix use-after-free after failure to create a snapshot (bsc#1226718). - CVE-2022-48740: selinux: fix double free of cond_list on error paths (bsc#1226699). - CVE-2022-48743: net: amd-xgbe: Fix skb data length underflow (bsc#1226705). - CVE-2022-48756: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (bsc#1226698) - CVE-2022-48759: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (bsc#1226711). - CVE-2022-48761: usb: xhci-plat: fix crash when suspend if remote wake enable (bsc#1226701). - CVE-2022-48772: media: lgdt3306a: Add a check against null-pointer-def (bsc#1226976). - CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148). - CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420). - CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci (bsc#1220833). - CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080). - CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504). - CVE-2023-52683: ACPI: LPIT: Avoid u32 multiplication overflow (bsc#1224627). - CVE-2023-52693: ACPI: video: check for error while searching for backlight device parent (bsc#1224686). - CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487). - CVE-2023-52753: drm/amd/display: Avoid NULL dereference of timing generator (bsc#1225478). - CVE-2023-52754: media: imon: fix access to invalid resource for the second interface (bsc#1225490). - CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548). - CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573). - CVE-2023-52764: media: gspca: cpia1: shift-out-of-bounds in set_flicker (bsc#1225571). - CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946). - CVE-2023-52817: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (bsc#1225569). - CVE-2023-52818: drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (bsc#1225530). - CVE-2023-52819: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (bsc#1225532). - CVE-2023-52832: wifi: mac80211: do not return unset power in ieee80211_get_tx_power() (bsc#1225577). - CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599). - CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602). - CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951). - CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585). - CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583). - CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611). - CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647). - CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656). - CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659). - CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654). - CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385). - CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435). - CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364). - CVE-2024-26813: vfio/platform: Create persistent IRQ handlers (bsc#1222809). - CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021). - CVE-2024-26880: dm: call the resume method on internal suspend (bsc#1223188). - CVE-2024-26894: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (bsc#1223043). - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384). - CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532). - CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (bsc#1223641). - CVE-2024-27399: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (bsc#1224177). - CVE-2024-27410: Reject iftype change with mesh ID change (bsc#1224432). - CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948). - CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743). - CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735). - CVE-2024-35819: soc: fsl: qbman: Use raw spinlock for cgr_lock (bsc#1224683). - CVE-2024-35822: usb: udc: remove warning when queue disabled ep (bsc#1224739). - CVE-2024-35828: wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (bsc#1224622). - CVE-2024-35835: net/mlx5e: fix a doubl

Есть исправление

Опубликовано

2024-07-18T14:04:33Z

Обновлено

2026-02-04T04:09:56.083872Z

Стек: system

Проверьте свой сервер →