p PatchFirst

SUSE-SU-2022:2803-1

SUSE-SU-2022:2803-1 · Security update for the Linux Kernel

Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.

Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635). - CVE-2022-2585: Fixed use-after-free in POSIX CPU timer (bnc#1202094). - CVE-2022-21505: Fixed kexec lockdown bypass with IMA policy (bsc#1201458). - CVE-2022-26373: Fixed CPU info leak via post-barrier RSB predictions (bsc#1201726). - CVE-2022-29581: Fixed improper update of Reference Count in net/sched that could cause root privilege escalation (bnc#1199665). The following non-security bugs were fixed: - ACPI: CPPC: Only probe for _CPC if CPPC v2 is acked (git-fixes). - ACPI: video: Fix acpi_video_handles_brightness_key_presses() (git-fixes). - ALSA: hda - Add fixup for Dell Latitidue E5430 (git-fixes). - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model (git-fixes). - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (git-fixes). - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 (git-fixes). - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo L140PU (git-fixes). - ALSA: hda/realtek: Fix headset mic for Acer SF313-51 (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs for HP machines (git-fixes). - ALSA: usb-audio: Add quirk for Fiero SC-01 (fw v1.0.0) (git-fixes). - ALSA: usb-audio: Add quirk for Fiero SC-01 (git-fixes). - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices (git-fixes). - ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD (git-fixes). - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle (git-fixes). - ARM: 9210/1: Mark the FDT_FIXED sections as shareable (git-fixes). - ARM: 9213/1: Print message about disabled Spectre workarounds only once (git-fixes). - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction (git-fixes). - ARM: dts: at91: sama5d2: Fix typo in i2s1 node (git-fixes). - ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count (git-fixes). - ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 (git-fixes). - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero (git-fixes). - ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array (git-fixes). - ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() (git-fixes). - ASoC: Intel: bytcr_wm5102: Fix GPIO related probe-ordering problem (git-fixes). - ASoC: Intel: sof_sdw: handle errors on card registration (git-fixes). - ASoC: Realtek/Maxim SoundWire codecs: disable pm_runtime on remove (git-fixes). - ASoC: Remove unused hw_write_t type (git-fixes). - ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow (git-fixes). - ASoC: codecs: rt700/rt711/rt711-sdca: initialize workqueues in probe (git-fixes). - ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect (git-fixes). - ASoC: cs47l15: Fix event generation for low power mux control (git-fixes). - ASoC: dapm: Initialise kcontrol data for mux/demux controls (git-fixes). - ASoC: madera: Fix event generation for OUT1 demux (git-fixes). - ASoC: madera: Fix event generation for rate controls (git-fixes). - ASoC: ops: Fix off by one in range control validation (git-fixes). - ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend (git-fixes). - ASoC: rt5682: Fix deadlock on resume (git-fixes). - ASoC: rt5682: Re-detect the combo jack after resuming (git-fixes). - ASoC: rt5682: fix an incorrect NULL check on list iterator (git-fixes). - ASoC: rt5682: move clk related code to rt5682_i2c_probe (git-fixes). - ASoC: rt7*-sdw: harden jack_detect_handler (git-fixes). - ASoC: rt711-sdca-sdw: fix calibrate mutex initialization (git-fixes). - ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver (git-fixes). - ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error (git-fixes). - ASoC: rt711: Add endianness flag in snd_soc_component_driver (git-fixes). - ASoC: rt711: fix calibrate mutex initialization (git-fixes). - ASoC: sgtl5000: Fix noise on shutdown/remove (git-fixes). - ASoC: tas2764: Add post reset delays (git-fixes). - ASoC: tas2764: Correct playback volume range (git-fixes). - ASoC: tas2764: Fix amp gain register offset & default (git-fixes). - ASoC: tas2764: Fix and extend FSYNC polarity handling (git-fixes). - ASoC: wcd938x: Fix event generation for some controls (git-fixes). - ASoC: wm5110: Fix DRE control (git-fixes). - Bluetooth: btusb: Add the new support IDs for WCN6855 (git-fixxes). - Input: cpcap-pwrbutton - handle errors from platform_get_irq() (git-fixes). - Input: i8042 - Apply probe defer to more ASUS ZenBook models (bsc#1190256). - NFC: nxp-nci: do not print header length mismatch on i2c error (git-fixes). - VMCI: Add support for ARM64 (bsc#1199291, jsc#SLE-24635). - VMCI: Check exclusive_vectors when freeing interrupt 1 (bsc#1199291, jsc#SLE-24635). - VMCI: Fix some error handling paths in vmci_guest_probe_device() (bsc#1199291, jsc#SLE-24635). - VMCI: Release notification_bitmap in error path (bsc#1199291, jsc#SLE-24635). - VMCI: dma dg: add MMIO access to registers (bsc#1199291, jsc#SLE-24635). - VMCI: dma dg: add support for DMA datagrams receive (bsc#1199291, jsc#SLE-24635). - VMCI: dma dg: add support for DMA datagrams sends (bsc#1199291, jsc#SLE-24635). - VMCI: dma dg: allocate send and receive buffers for DMA datagrams (bsc#1199291, jsc#SLE-24635). - VMCI: dma dg: detect DMA datagram capability (bsc#1199291, jsc#SLE-24635). - VMCI: dma dg: register dummy IRQ handlers for DMA datagrams (bsc#1199291, jsc#SLE-24635). - VMCI: dma dg: set OS page size (bsc#1199291, jsc#SLE-24635). - VMCI: dma dg: whitespace formatting change for vmci register defines (bsc#1199291, jsc#SLE-24635). - arm64: Add HWCAP for self-synchronising virtual counter (git-fixes) - arm64: Add cavium_erratum_23154_cpus missing sentinel (jsc#SLE-24682). - arm64: cpufeature: add HWCAP for FEAT_AFP (git-fixes) - arm64: dts: broadcom: bcm4908: Fix cpu node for smp boot (git-fixes). - arm64: dts: broadcom: bcm4908: Fix timer node for BCM4906 SoC (git-fixes) - arm64: dts: broadcom: bcm4908: Fix timer node for BCM4906 SoC (git-fixes). - arm64: dts: rockchip: Assign RK3399 VDU clock rate (git-fixes). - arm64: mm: Do not invalidate FROM_DEVICE buffers at start of DMA transfer (git-fixes) - batman-adv: Use netif_rx() (git-fixes). - bcmgenet: add WOL IRQ check (git-fixes). - be2net: Fix buffer overflow in be_get_module_eeprom (bsc#1201323). - blk-mq: add one API for waiting until quiesce is done (bsc#1201651). - blk-mq: fix kabi support concurrent queue quiesce unquiesce (bsc#1201651). - blk-mq: support concurrent queue quiesce/unquiesce (bsc#1201651). - can: bcm: use call_rcu() instead of costly synchronize_rcu() (git-fixes). - can: grcan: grcan_probe(): remove extra of_node_get() (git-fixes). - can: gs_usb: gs_usb_open/close(): fix memory leak (git-fixes). - can: m_can: m_can_chip_config(): actually enable internal timestamping (git-fixes). - can: mcp251xfd: mcp251xfd_regmap_crc_read(): improve workaround handling for mcp2517fd (git-fixes). - can: mcp251xfd: mcp251xfd_regmap_crc_read(): update workaround broken CRC on TBC register (git-fixes). - ceph: fix up non-directory creation in SGID directories (bsc#1201595). - cpufreq: mediatek: Unregister platform device on exit (git-fixes). - cpufreq: mediatek: Use module_init and add module_exit (git-fixes). - cpufreq: pmac32-cpufreq: Fix refcount leak bug (git-fixes). - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the (git-fixes) - crypto: hisilicon/qm - modify the uacce mode check (bsc#1201391). - crypto: octeontx2 - Avoid stack variable overflow (jsc#SLE-24682). - crypto: octeontx2 - CN10K CPT to RNM workaround (jsc#SLE-24682). - crypto: octeontx2 - Use swap() instead of swap_engines() (jsc#SLE-24682). - crypto: octeontx2 - add apis for custom engine groups

Korrektur verfügbar

Veröffentlicht
Aktualisiert

Technologie-Stack: system

Betroffene Produkte und Versionen

  • kernel-64kb SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-default-base SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1.150400.24.5.4

    Auf 5.14.21-150400.24.18.1.150400.24.5.4 aktualisieren

  • kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-zfcpdump SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-default SUSE:Linux Enterprise Live Patching 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-livepatch-sle15-sp4_update_2 SUSE:Linux Enterprise Live Patching 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 1-150400.9.5.2

    Auf 1-150400.9.5.2 aktualisieren

  • kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • dtb-aarch64 openSUSE:Leap 15.4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-64kb openSUSE:Leap 15.4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-debug openSUSE:Leap 15.4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-default openSUSE:Leap 15.4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-default-base openSUSE:Leap 15.4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1.150400.24.5.4

    Auf 5.14.21-150400.24.18.1.150400.24.5.4 aktualisieren

  • kernel-docs openSUSE:Leap 15.4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-kvmsmall openSUSE:Leap 15.4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-obs-build openSUSE:Leap 15.4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-obs-qa openSUSE:Leap 15.4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

  • kernel-source openSUSE:Leap 15.4

    Betroffene Versionsbereiche
    • ECOSYSTEM: < 5.14.21-150400.24.18.1

    Auf 5.14.21-150400.24.18.1 aktualisieren

Originalquellen

Prüfen Sie Ihren Server →