SUSE-SU-2022:3779-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2022/suse-su-20223779-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3779-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2022:3779-1

Related

Published

2022-10-26T13:03:14Z

Modified

2022-10-26T13:03:14Z

Summary

Security update for the Linux Kernel

Details

The SUSE Linux Enterprise 12-SP2 kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).

The following non-security bugs were fixed:

x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.

References

Affected packages

SUSE:Linux Enterprise Server 12 SP2-BCL / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.4.121-92.191.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.4.121-92.191.1",
            "kernel-devel": "4.4.121-92.191.1",
            "kernel-default-base": "4.4.121-92.191.1",
            "kernel-default": "4.4.121-92.191.1",
            "kernel-source": "4.4.121-92.191.1",
            "kernel-syms": "4.4.121-92.191.1",
            "kernel-default-devel": "4.4.121-92.191.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-BCL / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.4.121-92.191.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.4.121-92.191.1",
            "kernel-devel": "4.4.121-92.191.1",
            "kernel-default-base": "4.4.121-92.191.1",
            "kernel-default": "4.4.121-92.191.1",
            "kernel-source": "4.4.121-92.191.1",
            "kernel-syms": "4.4.121-92.191.1",
            "kernel-default-devel": "4.4.121-92.191.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-BCL / kernel-syms

Package

Name: kernel-syms
Purl: purl:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.4.121-92.191.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.4.121-92.191.1",
            "kernel-devel": "4.4.121-92.191.1",
            "kernel-default-base": "4.4.121-92.191.1",
            "kernel-default": "4.4.121-92.191.1",
            "kernel-source": "4.4.121-92.191.1",
            "kernel-syms": "4.4.121-92.191.1",
            "kernel-default-devel": "4.4.121-92.191.1"
        }
    ]
}