SUSE-SU-2024:3195-1

SUSE-SU-2024:3195-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). - CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326). - CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315). - CVE-2024-43911: Fix NULL dereference at band check in starting tx ba session (bsc#1229827). - CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409). - CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481). - CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754). - CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503) - CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495). - CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808). - CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720). - CVE-2024-36881: Fix reset ptes when close() for wr-protected (bsc#1225718). - CVE-2024-42316: Fix div-by-zero in vmpressure_calc_level() (bsc#1229353). - CVE-2024-43855: Fix deadlock between mddev_suspend and flush bio (bsc#1229342). - CVE-2024-43864: Fix CT entry update leaks of modify header context (bsc#1229496). - CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630). - CVE-2024-42109: Unconditionally flush pending work before notifier (bsc#1228505). - CVE-2024-41084: Avoid null pointer dereference in region lookup (bsc#1228472). - CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761) - CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623) - CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874) - CVE-2024-27079: Fix NULL domain on device release (bsc#1223742). - CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427). - CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510). - CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415). - CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803). - CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335). - CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967). - CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634). - CVE-2024-26809: Release elements in clone only from destroy path (bsc#1222633). - CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877). - CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297). - CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535). - CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374). - CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391). - CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314) - CVE-2024-27433: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711). - CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801) - CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074) - CVE-2024-40920: Fix suspicious rcu usage in br_mst_set_state (bsc#1227781). - CVE-2024-40921: Pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-36979: Fix vlan use-after-free (bsc#1226604). - CVE-2024-26590: Fix inconsistent per-file compression format (bsc#1220252). - CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582). - CVE-2024-42270: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404). - CVE-2024-42269: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402). - CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382) - CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383) - CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357) - CVE-2024-43854: Initialize integrity buffer to zero before writing it to media (bsc#1229345) - CVE-2024-42322: Properly dereference pe in ip_vs_add_service (bsc#1229347) - CVE-2024-42290: Handle runtime power management correctly (bsc#1229379). - CVE-2024-42318: Do not lose track of restrictions on cred_transfer (bsc#1229351). - CVE-2023-52889: Fix null pointer deref when receiving skb during sock creation (bsc#1229287). - CVE-2024-42295: Handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370). - CVE-2024-43850: Fix refcount imbalance seen during bwmon_remove (bsc#1229316). - CVE-2024-43831: Handle invalid decoder vsi (bsc#1229309). - CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301). - CVE-2024-41007: Use signed arithmetic in tcp_rtx_probe0_timed_out() (bsc#1227863). - CVE-2024-42281: Fix a segment issue when downgrading gso_size (bsc#1229386). - CVE-2024-26669: Fix chain template offload (bsc#1222350). - CVE-2024-26677: Blacklist e7870cf13d20 (' Fix delayed ACKs to not set the reference serial number') (bsc#1222387) - CVE-2024-41050: Cyclic allocation of msg_id to avoid reuse (bsc#1228499). - CVE-2024-41051: Wait for ondemand_object_worker to finish when dropping object (bsc#1228468). - CVE-2024-41074: Set object to close if ondemand_id < 0 in copen (bsc#1228643). - CVE-2024-41075: Add consistency check for copen/cread (bsc#1228646). - CVE-2024-41012: Remove locks reliably when fcntl/close race is detected (bsc#1228247). - CVE-2024-41080: Fix possible deadlock in io_register_iowq_max_workers() (bsc#1228616). - CVE-2024-42246: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989). - CVE-2024-42159: Fix sanitise num_phys (bsc#1228754). - CVE-2024-42241: Disable PMD-sized page cache if needed (bsc#1228986). - CVE-2024-42245: Revert 'sched/fair: Make sure to try to detach at least one movable task' (bsc#1228978). - CVE-2024-26735: Fix possible use-after-free and null-ptr-deref (bsc#1222372). - CVE-2024-26837: Race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973). - CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733). - CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722). - CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727). - CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720). - CVE-2024-38662: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885). - CVE-2024-40938: Fix d_parent walk (bsc#1227840). - CVE-2024-42247: Avoid unaligned 64-bit memory accesses (bsc#1228988). - CVE-2024-41010: Fix too early release of tcx_entry (bsc#1228021). - CVE-2024-42106: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493). - CVE-2024-42095: Fix Errata i2310 with RX FIFO level check (bsc#1228446). - CVE-2024-41068: Fix sclp_init() cleanup on failure (bsc#1228579). - CVE-2024-42138: Fix double memory deallocation in case of invalid INI file (bsc#1228500). - CVE-2024-42107: Do not process extts if PTP is disabled (bsc#1228494). - CVE-2024-42139: Fix improper extts handling (bsc#1228503). - CVE-2024-42110: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501). - CVE-2024-42113: Initialize num_q_vectors for MSI/INTx interrupts (bsc#1228568). - CVE-2024-42148: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487). - CVE-2024-42142: E-switch, Create ingress ACL when needed (bsc#1228491). - CVE-2024-42073: Fix memory corruptions on Spectrum-4 systems (bsc#1228457). - CVE-2024-42162: Account for stopped queues when reading NIC stats (bsc#1228706). - CVE-2024-42082: Remove WARN() from __xdp_reg_mem_model() (bsc#1228482). - CVE-2024-40978: Fix crash while reading debugfs attribute (bsc#1227929). - CVE-2024-41000: Prefer different overflow check (bsc#1227867). - CVE-2024-40995: Fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830). - CVE-2024-42161: Avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756). - CVE-2024-41069:

Есть исправление

Опубликовано

2024-09-10T14:10:24Z

Обновлено

2026-02-04T02:36:48.443793Z

Стек: system

Проверьте свой сервер →