SUSE-SU-2024:3251-1

SUSE-SU-2024:3251-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579). - CVE-2024-35933: Fixed build regression (bsc#1224640). - CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707). - CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). - CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156) - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500). - CVE-2024-43863: Fix a deadlock in dma buf fence polling (bsc#1229497) - CVE-2024-41087: Fix double free on error (bsc#1228466). - CVE-2024-43907: Fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787). - CVE-2024-43905: Fix the null pointer dereference for vega10_hwmgr (bsc#1229784). - CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759). - CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756). - CVE-2024-43902: Add null checker before passing variables (bsc#1229767). - CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658). - CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808). - CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503) - CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495). - CVE-2022-48910: Ensure we call ipv6_mc_down() at most once (bsc#1229632) - CVE-2023-52893: Fix null-deref in gsmi_get_variable (bsc#1229535) - CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733). - CVE-2022-48875: Initialize struct pn533_out_arg properly (bsc#1229516). - CVE-2023-52907: Wait for out_urb's completion in pn533_usb_send_frame() (bsc#1229526). - CVE-2024-43871: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490) - CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720). - CVE-2024-43872: Fix soft lockup under heavy CEQE load (bsc#1229489) - CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623) - CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709). - CVE-2024-42236: Prevent OOB read/write in usb_string_copy() (bsc#1228964). - CVE-2024-42244: Fix crash on resume (bsc#1228967). - CVE-2024-43879: Handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482). - CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803). - CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578). - CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427). - CVE-2024-41012: Remove locks reliably when fcntl/close race is detected (bsc#1228247). - CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335). - CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290). - CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727). - CVE-2021-47341: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (bsc#1224923). - CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301). - CVE-2022-48769: Avoid EFIv2 runtime services on Apple x86 machines (bsc#1226629). - CVE-2024-43856: Fix call order in dmam_free_coherent (bsc#1229346). - CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801) - CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074) - CVE-2024-40984: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (bsc#1227820). - CVE-2024-26677: Blacklist e7870cf13d20 (' Fix delayed ACKs to not set the reference serial number') (bsc#1222387) - CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388) - CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382) - CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357) - CVE-2024-42310: Fix null pointer dereference in cdv_intel_lvds_get_modes (bsc#1229358) - CVE-2024-42309: Fix null pointer dereference in psb_intel_lvds_get_modes (bsc#1229359) - CVE-2024-43854: Initialize integrity buffer to zero before writing it to media (bsc#1229345) - CVE-2024-42322: Properly dereference pe in ip_vs_add_service (bsc#1229347) - CVE-2024-42301: Fix the array out-of-bounds risk (bsc#1229407). - CVE-2024-42285: Fix a use-after-free related to destroying CM IDs (bsc#1229381) - CVE-2024-43831: Handle invalid decoder vsi (bsc#1229309). - CVE-2024-42281: Fix a segment issue when downgrading gso_size (bsc#1229386). - CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400) - CVE-2024-38618: Set lower bound of start tick time (bsc#1226754). - CVE-2024-41035: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (bsc#1228485) - CVE-2024-42162: Account for stopped queues when reading NIC stats (bsc#1228706). - CVE-2023-52708: Fix error handling in mmc_spi_probe() (bsc#1225483). - CVE-2021-47549: Fix UAF in sata_fsl_port_stop when rmmod sata_fsl (bsc#1225508). - CVE-2021-47373: Fix potential VPE leak on error (bsc#1225190). - CVE-2021-47425: Fix resource leak in reconfiguration device addition (bsc#1225223). - CVE-2024-42246: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989). - CVE-2024-41098: Fix null pointer dereference on error (bsc#1228467). - CVE-2021-4440: Drop USERGS_SYSRET64 paravirt call ( bsc#1227069). - CVE-2022-48786: Remove vsock from connected table when connect is interrupted by a signal (bsc#1227996). - CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959) - CVE-2024-35915: Fix uninit-value in nci_dev_up and nci_ntf_packet (bsc#1224479). - CVE-2024-38662: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885). - CVE-2024-42110: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501). - CVE-2024-42148: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487). - CVE-2024-42106: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493). - CVE-2022-48865: Fix kernel panic when enabling bearer (bsc#1228065). - CVE-2024-41068: Fix sclp_init() cleanup on failure (bsc#1228579). - CVE-2024-42082: Remove WARN() from __xdp_reg_mem_model() (bsc#1228482). - CVE-2024-42090: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (bsc#1228449). - CVE-2024-42101: Fix null pointer dereference in nouveau_connector_get_modes (bsc#1228495). - CVE-2024-42228: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (bsc#1228667). - CVE-2021-47257: fix null deref in parse dev addr (bsc#1224896). The following non-security bugs were fixed: - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to (git-fixes) - Bluetooth: L2CAP: Fix deadlock (git-fixes). - btrfs: fix processing of delayed tree block refs during backref walking (bsc#1228982). - btrfs: Remove unused op_key var from add_delayed_refs (bsc#1228982). - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801). - char: tpm: Protect tpm_pm_suspend with locks (bsc#1082555). - cpu/SMT: Enable SMT only if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes). - fuse: Initialize beyond-EOF page contents before setting uptodate (bsc#1229457). - genirq: Delay deactivation in free_irq() (git-fixes). - genirq: Make sure the initial affinity is not empty (git-fixes). - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (git-fixes). - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() (git-fixes). - genirq/irqdesc: Do not try to remove non-existing sysfs files (git-fixes). - genirq/irqdomain: Check pointer in irq_domain_alloc_irqs_hierarchy() (git-fixes). - genirq/msi: Activate Multi-MSI early when MSI_FLAG_ACTIVATE_EARLY is set (git-fixes). - genirq/msi: Ensure deactivation on teardown (git-fixes). - genirq/proc: Reject invalid affinity masks (again) (git-fixes). - gss_krb5: Fix the error handling path for crypto_sync_sk

Есть исправление

Опубликовано

2024-09-16T08:57:49Z

Обновлено

2026-02-04T02:21:09.952165Z

Стек: system

Проверьте свой сервер →