SUSE-SU-2023:0634-1

SUSE-SU-2023:0634-1 · Security update for the Linux Kernel

Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.

Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535). - CVE-2017-5754: Fixed speculative side channel attacks on various CPU platforms (bsc#1068032). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2022-4662: Fixed incorrect access control in the USB core subsystem that could lead a local user to crash the system (bsc#1206664). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2022-2991: Fixed an heap-based overflow in the lightnvm implemenation (bsc#1201420). - CVE-2023-0266: Fixed a use-after-free vulnerability inside the ALSA PCM package. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 was missing locks that could have been used in a use-after-free that could have resulted in a priviledge escalation to gain ring0 access from the system user (bsc#1207134). - CVE-2022-47929: Fixed NULL pointer dereference bug in the traffic control subsystem (bsc#1207237). The following non-security bugs were fixed: - add 00f3ca2c2d66 ('mm: memcontrol: per-lruvec stats infrastructure') - add 0b3d6e6f2dd0 mm: writeback: use exact memcg dirty counts - add 168e06f7937d kernel/hung_task.c: force console verbose before panic - add 1f4aace60b0e ('fs/seq_file.c: simplify seq_file iteration code and interface') - add 304ae42739b1 kernel/hung_task.c: break RCU locks based on jiffies - add 401c636a0eeb kernel/hung_task.c: show all hung tasks before panic - add Tegra repository to git_sort. - add a1c6ca3c6de7 kernel: hung_task.c: disable on suspend - add c3cc39118c36 mm: memcontrol: fix NR_WRITEBACK leak in memcg and system stats - add c892fd82cc06 mm: memcg: add __GFP_NOWARN in __memcg_schedule_kmem_cache_create() - add e27be240df53 mm: memcg: make sure memory.events is uptodate when waking pollers - add support for enabling livepatching related packages on -RT (jsc#PED-1706) - add suse-kernel-rpm-scriptlets to kmp buildreqs (boo#1205149) - amiflop: clean up on errors during setup (git-fixes). - audit: ensure userspace is penalized the same as the kernel when under pressure (bsc#1204514). - audit: improve robustness of the audit queue handling (bsc#1204514). - bcache: fix super block seq numbers comparision in register_cache_set() (git-fixes). - blk-cgroup: Fix memleak on error path (git-fixes). - blk-cgroup: Pre-allocate tree node on blkg_conf_prep (git-fixes). - blk-cgroup: fix missing put device in error path from blkg_conf_pref() (git-fixes). - blk-mq: fix possible memleak when register 'hctx' failed (git-fixes). - blk-mq: insert request not through ->queue_rq into sw/scheduler queue (git-fixes). - blk-mq: move cancel of requeue_work into blk_mq_release (git-fixes). - blktrace: Fix output non-blktrace event when blk_classic option enabled (git-fixes). - blktrace: break out of blktrace setup on concurrent calls (git-fixes). - blktrace: ensure our debugfs dir exists (git-fixes). - blktrace: fix endianness for blk_log_remap() (git-fixes). - blktrace: fix endianness in get_pdu_int() (git-fixes). - blktrace: use errno instead of bi_status (git-fixes). - block, bfq: fix overwrite of bfq_group pointer in bfq_find_set_group() (bsc#1175995,jsc#SLE-15608). - block, bfq: fix overwrite of bfq_group pointer in bfq_find_set_group() (git-fixes). - block, bfq: increase idling for weight-raised queues (git-fixes). - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (bsc#1207102). - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (git-fixes). - block/bio-integrity: do not free 'buf' if bio_integrity_add_page() failed (git-fixes). - block/bio-integrity: fix a memory leak bug (git-fixes). - block/swim: Check drive type (git-fixes). - block/swim: Do not log an error message for an invalid ioctl (git-fixes). - block/swim: Fix IO error at end of medium (git-fixes). - block/swim: Rename macros to avoid inconsistent inverted logic (git-fixes). - block/swim: Select appropriate drive on device open (git-fixes). - block: Fix use-after-free issue accessing struct io_cq (git-fixes). - block: add a lower-level bio_add_page interface (git-fixes). - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541). - block: fix memleak when __blk_rq_map_user_iov() is failed (git-fixes). - block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR (git-fixes). - brd: check and limit max_part par (git-fixes). - compat_ioctl: block: handle BLKGETZONESZ/BLKGETNRZONES (git-fixes). - constraints: increase disk space for all architectures References: bsc#1203693 aarch64 is already suffering. SLE15-SP5 x86_64 stats show that it is very close to the limit. - cpu/hotplug: Fix 'SMT disabled by BIOS' detection for KVM (git-fixes). - cryptoloop: add a deprecation warning (git-fixes). - d6810d730022 ('memcg, THP, swap: make mem_cgroup_swapout() support THP') - dm bio record: save/restore bi_end_io and bi_integrity (git-fixes). - dm btree: add a defensive bounds check to insert_at() (git-fixes). - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (git-fixes). - dm cache: Fix UAF in destroy() (git-fixes). - dm cache: set needs_check flag after aborting metadata (git-fixes). - dm crypt: use u64 instead of sector_t to store iv_offset (git-fixes). - dm flakey: Properly corrupt multi-page bios (git-fixes). - dm ioctl: fix misbehavior if list_versions races with module loading (git-fixes). - dm ioctl: prevent potential spectre v1 gadget (git-fixes). - dm kcopyd: Fix bug causing workqueue stalls (git-fixes). - dm raid: avoid bitmap with raid4/5/6 journal device (git-fixes). - dm space map common: add bounds check to sm_ll_lookup_bitmap() (git-fixes). - dm space maps: do not reset space map allocation cursor when committing (git-fixes). - dm table: Remove BUG_ON(in_interrupt()) (git-fixes). - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (git-fixes). - dm thin: Fix UAF in run_timer_softirq() (git-fixes). - dm thin: Use last transaction's pmd->root when commit failed (git-fixes). - dm thin: add sanity checks to thin-pool and external snapshot creation (git-fixes). - dm thin: resume even if in FAIL mode (git-fixes). - dm verity: skip verity work if I/O error when system is shutting down (git-fixes). - dm verity: use message limit for data block corruption message (git-fixes). - dm zoned: return NULL if dmz_get_zone_for_reclaim() fails to find a zone (git-fixes). - dm: Use kzalloc for all structs with embedded biosets/mempools (git-fixes). - do not dump the threads that had been already exiting when zapped (git-fixes). - drbd: Change drbd_request_detach_interruptible's return type to int (git-fixes). - drbd: destroy workqueue when drbd device was freed (git-fixes). - drbd: do not block when adjusting 'disk-options' while IO is frozen (git-fixes). - drbd: dynamically allocate shash descriptor (git-fixes). - drbd: fix potential silent data corruption (git-fixes). - drbd: fix print_st_err()'s prototype to match the definition (git-fixes). - drbd: ignore 'all zero' peer volume sizes in handshake (git-fixes). - drbd: reject attach of unsuitable uuids even if connected (git-fixes). - drbd: remove usage of list iterator variable after loop (git-fixes). - drbd: use after free in drbd_create_device() (git-fixes). - drivers/block/zram/zram_drv.c: fix bug storing backing_dev (git-fixes). - drivers:md:fix a potential use-after-free bug (git-fixes). - ext4: Detect already used quota file early (bsc#1206873). - ext4: Fixup pages without buffers (bsc#1205495). - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878). - ext4: add reserved GDT blocks check (bsc#1202712). - ext4: avoid crash when inline data creation follows DIO write (bsc#1206883). - ext4: avoid resiz

Korrektur verfügbar

Veröffentlicht

2023-03-07T10:35:44Z

Aktualisiert

2026-02-04T03:12:16.001395Z

Technologie-Stack: system

Prüfen Sie Ihren Server →