SUSE-SU-2022:0289-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2022/suse-su-20220289-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0289-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2022:0289-1
Upstream
CVE (10)
Related
CVE (10)
Published
2022-02-02T09:02:15Z
Modified
2026-03-11T07:19:16Z
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2021-4083: Fixed race condition in Unix domain socket garbage collection that could lead to read memory after free (bsc#1193727).
  • CVE-2021-4135: Fixed an information leak in the nsim_bpf_map_alloc function (bsc#1193927).
  • CVE-2021-4149: Fixed improper lock operation in btrfs that allowed users to crash the kernel or deadlock the system (bsc#1194001).
  • CVE-2021-4197: Fixed a cgroup issue where lower privileged processes could write to fds of lower privileged ones that could lead to privilege escalation (bsc#1194302).
  • CVE-2021-4202: Fixed race condition in nci_request() that could cause use-after-free (bsc#1194529).
  • CVE-2021-44733: Fixed a use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel that occured because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object (bnc#1193767).
  • CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source addresses (bsc#1194094).
  • CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c (bnc#1194087).
  • CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517).
  • CVE-2022-0322: Fixed a denial of service in SCTP sctp_addto_chunk (bsc#1194985).

The following non-security bugs were fixed:

  • ext4: Avoid trim error on fs with small groups (bsc#1191271).
  • fget: clarify and improve __fget_files() implementation (bsc#1193727).
  • kabi/severities: Add a kabi exception for drivers/tee/tee
  • kprobes: Limit max data_size of the kretprobe instances (bsc#1193669).
  • livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
  • media: Revert 'media: uvcvideo: Set unique vdev name based in type' (bsc#1193255).
  • moxart: fix potential use-after-free on remove path (bsc#1194516).
  • powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic (bsc#1193901).
  • powerpc: handle kdump appropriately with crash_kexec_post_notifiers option (bsc#1193901).
  • tpm: fix potential NULL pointer access in tpm_del_char_device (bsc#1184209, bsc#1193660).
  • vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
References

Affected packages

SUSE:Linux Enterprise Micro 5.0
kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.3.18-68.1

Ecosystem specific 

{
    "binaries":  [
        {
            "kernel-rt":  "5.3.18-68.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0289-1.json"
SUSE:Real Time Module 15 SP2
kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.3.18-68.1

Ecosystem specific 

{
    "binaries":  [
        {
            "cluster-md-kmp-rt":  "5.3.18-68.1",
            "dlm-kmp-rt":  "5.3.18-68.1",
            "gfs2-kmp-rt":  "5.3.18-68.1",
            "kernel-devel-rt":  "5.3.18-68.1",
            "kernel-rt":  "5.3.18-68.1",
            "kernel-rt-devel":  "5.3.18-68.1",
            "kernel-rt_debug":  "5.3.18-68.1",
            "kernel-rt_debug-devel":  "5.3.18-68.1",
            "kernel-source-rt":  "5.3.18-68.1",
            "kernel-syms-rt":  "5.3.18-68.1",
            "ocfs2-kmp-rt":  "5.3.18-68.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0289-1.json"
kernel-rt_debug

Package

Name
kernel-rt_debug
Purl
pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.3.18-68.1

Ecosystem specific 

{
    "binaries":  [
        {
            "cluster-md-kmp-rt":  "5.3.18-68.1",
            "dlm-kmp-rt":  "5.3.18-68.1",
            "gfs2-kmp-rt":  "5.3.18-68.1",
            "kernel-devel-rt":  "5.3.18-68.1",
            "kernel-rt":  "5.3.18-68.1",
            "kernel-rt-devel":  "5.3.18-68.1",
            "kernel-rt_debug":  "5.3.18-68.1",
            "kernel-rt_debug-devel":  "5.3.18-68.1",
            "kernel-source-rt":  "5.3.18-68.1",
            "kernel-syms-rt":  "5.3.18-68.1",
            "ocfs2-kmp-rt":  "5.3.18-68.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0289-1.json"
kernel-source-rt

Package

Name
kernel-source-rt
Purl
pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.3.18-68.1

Ecosystem specific 

{
    "binaries":  [
        {
            "cluster-md-kmp-rt":  "5.3.18-68.1",
            "dlm-kmp-rt":  "5.3.18-68.1",
            "gfs2-kmp-rt":  "5.3.18-68.1",
            "kernel-devel-rt":  "5.3.18-68.1",
            "kernel-rt":  "5.3.18-68.1",
            "kernel-rt-devel":  "5.3.18-68.1",
            "kernel-rt_debug":  "5.3.18-68.1",
            "kernel-rt_debug-devel":  "5.3.18-68.1",
            "kernel-source-rt":  "5.3.18-68.1",
            "kernel-syms-rt":  "5.3.18-68.1",
            "ocfs2-kmp-rt":  "5.3.18-68.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0289-1.json"
kernel-syms-rt

Package

Name
kernel-syms-rt
Purl
pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.3.18-68.1

Ecosystem specific 

{
    "binaries":  [
        {
            "cluster-md-kmp-rt":  "5.3.18-68.1",
            "dlm-kmp-rt":  "5.3.18-68.1",
            "gfs2-kmp-rt":  "5.3.18-68.1",
            "kernel-devel-rt":  "5.3.18-68.1",
            "kernel-rt":  "5.3.18-68.1",
            "kernel-rt-devel":  "5.3.18-68.1",
            "kernel-rt_debug":  "5.3.18-68.1",
            "kernel-rt_debug-devel":  "5.3.18-68.1",
            "kernel-source-rt":  "5.3.18-68.1",
            "kernel-syms-rt":  "5.3.18-68.1",
            "ocfs2-kmp-rt":  "5.3.18-68.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0289-1.json"