SUSE-SU-2022:0544-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2022/suse-su-20220544-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0544-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2022:0544-1
Upstream
CVE (6)
Related
CVE (6)
Published
2022-02-21T12:51:44Z
Modified
2026-03-11T07:19:18Z
Summary
Security update for the Linux RT Kernel
Details

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254).
  • CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bnc#1193867).
  • CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065).
  • CVE-2021-22600: Fixed double free bug in packet_set_ring() in net/packet/af_packet.c that could have been exploited by a local user through crafted syscalls to escalate privileges or deny service (bnc#1195184).
  • CVE-2021-39657: Fixed out of bounds read due to a missing bounds check in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local information disclosure with System execution privileges needed (bnc#1193864).
  • CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a race condition in gadget_dev_desc_UDC_show of configfs.c. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1193861).
  • CVE-2022-0330: Fixed flush TLBs before releasing backing store (bsc#1194880).

The following non-security bugs were fixed:

  • bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() (bsc#1194227).
  • btrfs: tree-checker: Add EXTENT_ITEM and METADATA_ITEM check (bsc#1195009).
  • btrfs: tree-checker: annotate all error branches as unlikely (bsc#1195009).
  • btrfs: tree-checker: check for BTRFS_BLOCK_FLAG_FULL_BACKREF being set improperly (bsc#1195009).
  • hv_netvsc: Set needed_headroom according to VF (bsc#1193506).
  • net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506).
  • net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506).
  • net: allow retransmitting a TCP packet if original is still in queue (bsc#1188605 bsc#1187428).
  • net: mana: Add RX fencing (bsc#1193506).
  • net: mana: Add XDP support (bsc#1193506).
  • net: sch_generic: aviod concurrent reset and enqueue op for lockless qdisc (bsc#1183405).
  • net: sched: add barrier to ensure correct ordering for lockless qdisc (bsc#1183405).
  • net: sched: avoid unnecessary seqcount operation for lockless qdisc (bsc#1183405).
  • net: sched: fix packet stuck problem for lockless qdisc (bsc#1183405).
  • net: sched: fix tx action reschedule issue with stopped queue (bsc#1183405).
  • net: sched: fix tx action rescheduling issue during deactivation (bsc#1183405).
  • net: sched: replaced invalid qdisc tree flush helper in qdisc_replace (bsc#1183405).
  • net_sched: avoid resetting active qdisc for multiple times (bsc#1183405).
  • net_sched: get rid of unnecessary dev_qdisc_reset() (bsc#1183405).
  • net_sched: use qdisc_reset() in qdisc_destroy() (bsc#1183405).
  • nvme: add 'iopolicy' module parameter (bsc#1177599 bsc#1193096).
  • xfrm: fix MTU regression (bsc#1185377, bsc#1194048).
References

Affected packages

SUSE:Linux Enterprise Micro 5.0
kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.3.18-73.1

Ecosystem specific 

{
    "binaries":  [
        {
            "kernel-rt":  "5.3.18-73.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0544-1.json"
SUSE:Real Time Module 15 SP2
kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.3.18-73.1

Ecosystem specific 

{
    "binaries":  [
        {
            "cluster-md-kmp-rt":  "5.3.18-73.1",
            "dlm-kmp-rt":  "5.3.18-73.1",
            "gfs2-kmp-rt":  "5.3.18-73.1",
            "kernel-devel-rt":  "5.3.18-73.1",
            "kernel-rt":  "5.3.18-73.1",
            "kernel-rt-devel":  "5.3.18-73.1",
            "kernel-rt_debug":  "5.3.18-73.1",
            "kernel-rt_debug-devel":  "5.3.18-73.1",
            "kernel-source-rt":  "5.3.18-73.1",
            "kernel-syms-rt":  "5.3.18-73.1",
            "ocfs2-kmp-rt":  "5.3.18-73.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0544-1.json"
kernel-rt_debug

Package

Name
kernel-rt_debug
Purl
pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.3.18-73.1

Ecosystem specific 

{
    "binaries":  [
        {
            "cluster-md-kmp-rt":  "5.3.18-73.1",
            "dlm-kmp-rt":  "5.3.18-73.1",
            "gfs2-kmp-rt":  "5.3.18-73.1",
            "kernel-devel-rt":  "5.3.18-73.1",
            "kernel-rt":  "5.3.18-73.1",
            "kernel-rt-devel":  "5.3.18-73.1",
            "kernel-rt_debug":  "5.3.18-73.1",
            "kernel-rt_debug-devel":  "5.3.18-73.1",
            "kernel-source-rt":  "5.3.18-73.1",
            "kernel-syms-rt":  "5.3.18-73.1",
            "ocfs2-kmp-rt":  "5.3.18-73.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0544-1.json"
kernel-source-rt

Package

Name
kernel-source-rt
Purl
pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.3.18-73.1

Ecosystem specific 

{
    "binaries":  [
        {
            "cluster-md-kmp-rt":  "5.3.18-73.1",
            "dlm-kmp-rt":  "5.3.18-73.1",
            "gfs2-kmp-rt":  "5.3.18-73.1",
            "kernel-devel-rt":  "5.3.18-73.1",
            "kernel-rt":  "5.3.18-73.1",
            "kernel-rt-devel":  "5.3.18-73.1",
            "kernel-rt_debug":  "5.3.18-73.1",
            "kernel-rt_debug-devel":  "5.3.18-73.1",
            "kernel-source-rt":  "5.3.18-73.1",
            "kernel-syms-rt":  "5.3.18-73.1",
            "ocfs2-kmp-rt":  "5.3.18-73.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0544-1.json"
kernel-syms-rt

Package

Name
kernel-syms-rt
Purl
pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.3.18-73.1

Ecosystem specific 

{
    "binaries":  [
        {
            "cluster-md-kmp-rt":  "5.3.18-73.1",
            "dlm-kmp-rt":  "5.3.18-73.1",
            "gfs2-kmp-rt":  "5.3.18-73.1",
            "kernel-devel-rt":  "5.3.18-73.1",
            "kernel-rt":  "5.3.18-73.1",
            "kernel-rt-devel":  "5.3.18-73.1",
            "kernel-rt_debug":  "5.3.18-73.1",
            "kernel-rt_debug-devel":  "5.3.18-73.1",
            "kernel-source-rt":  "5.3.18-73.1",
            "kernel-syms-rt":  "5.3.18-73.1",
            "ocfs2-kmp-rt":  "5.3.18-73.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0544-1.json"