SUSE-SU-2022:4272-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2022/suse-su-20224272-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:4272-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2022:4272-1

Related

Published

2022-11-29T14:23:31Z

Modified

2022-11-29T14:23:31Z

Summary

Security update for the Linux Kernel

Details

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bnc#1198702).
CVE-2022-2153: Fixed vulnerability in KVM that could allow an unprivileged local attacker on the host to cause DoS (bnc#1200788).
CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bnc#1202686).
CVE-2022-3169: Fixed a denial of service flaw which occurs when consecutive requests to NVMEIOCTLRESET and the NVMEIOCTLSUBSYS_RESET are sent (bnc#1203290).
CVE-2022-3521: Fixed race condition in kcmtxwork() in net/kcm/kcmsock.c (bnc#1204355).
CVE-2022-3524: Fixed memory leak in ipv6renewoptions() in the IPv6 handler (bnc#1204354).
CVE-2022-3542: Fixed memory leak in bnx2xtpastop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bnc#1204402).
CVE-2022-3545: Fixed use-after-free in areacacheget() in drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bnc#1204415).
CVE-2022-3565: Fixed use-after-free in deltimer() in drivers/isdn/mISDN/l1oipcore.c (bnc#1204431).
CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bnc#1204439).
CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bnc#1204479).
CVE-2022-3621: Fixed null pointer dereference in nilfsbmaplookupatlevel() in fs/nilfs2/inode.c (bnc#1204574).
CVE-2022-3629: Fixed memory leak in vsockconnect() in net/vmwvsock/af_vsock.c (bnc#1204635).
CVE-2022-3646: Fixed memory leak in nilfsattachlog_writer() in fs/nilfs2/segment.c (bnc#1204646).
CVE-2022-3649: Fixed use-after-free in nilfsnewinode() in fs/nilfs2/inode.c (bnc#1204647).
CVE-2022-40307: Fixed a race condition that could had been exploited to trigger a use-after-free in the efi firmware capsule-loader.c (bnc#1203322).
CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory (bnc#1203514).
CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).
CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bnc#1204653).

The following non-security bugs were fixed:

ACPI: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems (bnc#1203802).
ACPI: processor_idle: Skip dummy wait if kernel is in guest (bnc#1203802).
Input: gscps2 - check return value of ioremap() in gscps2_probe() (git-fixes).
Input: xpad - add supported devices as contributed on github (git-fixes).
KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (git-fixes).
USB: core: Fix RST error in hub.c (git-fixes).
USB: serial: ch341: add basis for quirk detection (git-fixes).
USB: serial: ch341: fix lockup of devices with limited prescaler (git-fixes).
USB: serial: ch341: fix lost character on LCR updates (git-fixes).
USB: serial: ch341: fix receiver regression (git-fixes).
USB: serial: ch341: reimplement line-speed handling (git-fixes).
USB: serial: cp210x: add Decagon UCA device id (git-fixes).
USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (git-fixes).
USB: serial: option: add Quectel BG95 0x0203 composition (git-fixes).
USB: serial: option: add Quectel EM060K modem (git-fixes).
USB: serial: option: add Quectel RM520N (git-fixes).
USB: serial: option: add support for OPPO R11 diag port (git-fixes).
amd-xgbe: Update DMA coherency values (git-fixes).
bnxt: do not lock the tx queue from napi poll (git-fixes).
bnxt_en: Fix RX consumer index logic in the error path (git-fixes).
bnxt_en: reverse order of TX disable and carrier off (git-fixes).
ethernet: sun: niu: fix missing checks of niupcieeprom_read() (git-fixes).
i40e: Fix flow for IPv6 next header (extension header) (git-fixes).
i40e: Fix overwriting flow control settings during driver loading (git-fixes).
i40e: improve locking of macfilterhash (git-fixes).
ip6: fix skb leak in ip6fragexpirefrag_queue (bsc#1202972)
locking/csdlock: Change csdlockdebug from earlyparam to _setup (git-fixes).
memcg, kmem: do not fail _GFPNOFAIL charges (bsc#1204755).
net/mlx4: Fix EEPROM dump support (git-fixes).
net/mlx4core: Add missed mlx4freecmdmailbox() (git-fixes).
net/mlx5e: Remove dependency in IPsec initialization flows (git-fixes).
net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning (git-fixes).
net: amd-xgbe: Fix network fluctuations when using 1G BELFUSE SFP (git-fixes).
net: amd-xgbe: Reset link when the link never comes back (git-fixes).
net: dsa: mt7530: add the missing RxUnicast MIB counter (git-fixes).
net: ethernet: ezchip: fix UAF in npsenetremove (git-fixes).
net: lapbether: Prevent racing when checking whether the netif is running (git-fixes).
net: marvell: fix MVNETATXIN_PRGRS bit number (git-fixes).
net: mvpp2: Put fwnode in error case during ->probe() (git-fixes).
net: stmmac: fix watchdog timeout during suspend/resume stress test (git-fixes).
net: stmmac: stop each tx channel independently (git-fixes).
net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (git-fixes).
net: vxge: fix use-after-free in vxgedeviceunregister (git-fixes).
nvmem: core: Check input parameter for NULL in nvmem_unregister() (bsc#1204241).
powerpc/mm/64s: Drop pgd_huge() (bsc#1065729).
powerpc/mm: remove pmdhuge/pudhuge stubs and include hugetlb.h (bsc#1065729).
powerpc/pcidn: Add missing ofnode_put() (bsc#1065729).
powerpc/powernv: add missing ofnodeput() in opalexportattrs() (bsc#1065729).
ppp: Fix generating ifname when empty IFLA_IFNAME is specified (git-fixes).
ppp: Fix generating ppp unit id when ifname is not specified (git-fixes).
quota: widen timestamps for the fsdiskquota structure (bsc#1203387).
r8169: fix jumbo packet handling on RTL8168e (git-fixes).
s390/guarded storage: simplify task exit handling (bsc#1203254 LTC#199911).
s390/hugetlb: fix preparehugepagerange() check for 2 GB hugepages (bsc#1203142 LTC#199883).
s390/hypfs: avoid error message under KVM (bsc#1032323).
s390/mm: do not trigger write fault when vma does not allow VM_WRITE (bsc#1203198 LTC#199898).
s390: fix double free of GS and RI CBs on fork() failure (bsc#1203254 LTC#199911).
x86/xen: Remove undefined behavior in setup_features() (git-fixes).
xfs: account finobt blocks properly in perag reservation (bsc#1203387).
xfs: enable big timestamps (bsc#1203387).
xfs: enable new inode btree counters feature (bsc#1203387).
xfs: explicitly define inode timestamp range (bsc#1203387).
xfs: preserve default grace interval during quotacheck (bsc#1203387).
xfs: quota: move to time64_t interfaces (bsc#1203387).
xfs: redefine xfsictimestampt (bsc#1203387).
xfs: redefine xfstimestampt (bsc#1203387).
xfs: store inode btree block counts in AGI header (bsc#1203387).
xfs: use a struct timespec64 for the in-core crtime (bsc#1203387).
xfs: use the finobt block counts to speed up mount times (bsc#1203387).
xfs: widen ondisk inode timestamps to deal with y2038+ (bsc#1203387).
xfs: widen ondisk quota expiration timestamps to handle y2038+ (bsc#1203387).

References

Affected packages

SUSE:Linux Enterprise High Availability Extension 12 SP5 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.139.1

Ecosystem specific

{
    "binaries": [
        {
            "dlm-kmp-default": "4.12.14-122.139.1",
            "gfs2-kmp-default": "4.12.14-122.139.1",
            "ocfs2-kmp-default": "4.12.14-122.139.1",
            "cluster-md-kmp-default": "4.12.14-122.139.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP5 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.139.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_12_14-122_139-default": "1-8.3.1",
            "kernel-default-kgraft": "4.12.14-122.139.1",
            "kernel-default-kgraft-devel": "4.12.14-122.139.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP5 / kgraft-patch-SLE12-SP5_Update_37

Package

Name: kgraft-patch-SLE12-SP5_Update_37
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP5_Update_37&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1-8.3.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_12_14-122_139-default": "1-8.3.1",
            "kernel-default-kgraft": "4.12.14-122.139.1",
            "kernel-default-kgraft-devel": "4.12.14-122.139.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP5 / kernel-docs

Package

Name: kernel-docs
Purl: purl:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.139.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "4.12.14-122.139.1",
            "kernel-obs-build": "4.12.14-122.139.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP5 / kernel-obs-build

Package

Name: kernel-obs-build
Purl: purl:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.139.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "4.12.14-122.139.1",
            "kernel-obs-build": "4.12.14-122.139.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP5 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.139.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.139.1",
            "kernel-devel": "4.12.14-122.139.1",
            "kernel-default-base": "4.12.14-122.139.1",
            "kernel-default-man": "4.12.14-122.139.1",
            "kernel-default": "4.12.14-122.139.1",
            "kernel-source": "4.12.14-122.139.1",
            "kernel-syms": "4.12.14-122.139.1",
            "kernel-default-devel": "4.12.14-122.139.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP5 / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.139.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.139.1",
            "kernel-devel": "4.12.14-122.139.1",
            "kernel-default-base": "4.12.14-122.139.1",
            "kernel-default-man": "4.12.14-122.139.1",
            "kernel-default": "4.12.14-122.139.1",
            "kernel-source": "4.12.14-122.139.1",
            "kernel-syms": "4.12.14-122.139.1",
            "kernel-default-devel": "4.12.14-122.139.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP5 / kernel-syms

Package

Name: kernel-syms
Purl: purl:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.139.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.139.1",
            "kernel-devel": "4.12.14-122.139.1",
            "kernel-default-base": "4.12.14-122.139.1",
            "kernel-default-man": "4.12.14-122.139.1",
            "kernel-default": "4.12.14-122.139.1",
            "kernel-source": "4.12.14-122.139.1",
            "kernel-syms": "4.12.14-122.139.1",
            "kernel-default-devel": "4.12.14-122.139.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP5 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.139.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.139.1",
            "kernel-devel": "4.12.14-122.139.1",
            "kernel-default-base": "4.12.14-122.139.1",
            "kernel-default-man": "4.12.14-122.139.1",
            "kernel-default": "4.12.14-122.139.1",
            "kernel-source": "4.12.14-122.139.1",
            "kernel-syms": "4.12.14-122.139.1",
            "kernel-default-devel": "4.12.14-122.139.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP5 / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.139.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.139.1",
            "kernel-devel": "4.12.14-122.139.1",
            "kernel-default-base": "4.12.14-122.139.1",
            "kernel-default-man": "4.12.14-122.139.1",
            "kernel-default": "4.12.14-122.139.1",
            "kernel-source": "4.12.14-122.139.1",
            "kernel-syms": "4.12.14-122.139.1",
            "kernel-default-devel": "4.12.14-122.139.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP5 / kernel-syms

Package

Name: kernel-syms
Purl: purl:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.139.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.139.1",
            "kernel-devel": "4.12.14-122.139.1",
            "kernel-default-base": "4.12.14-122.139.1",
            "kernel-default-man": "4.12.14-122.139.1",
            "kernel-default": "4.12.14-122.139.1",
            "kernel-source": "4.12.14-122.139.1",
            "kernel-syms": "4.12.14-122.139.1",
            "kernel-default-devel": "4.12.14-122.139.1"
        }
    ]
}

SUSE:Linux Enterprise Workstation Extension 12 SP5 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-122.139.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-extra": "4.12.14-122.139.1"
        }
    ]
}