SUSE-SU-2024:0484-1

SUSE-SU-2024:0484-1 · Security update for the Linux Kernel

Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.

Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation (bsc#1219434). - CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689). - CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl in net/atm/ioctl.c, because of a vcc_recvmsg race condition (bsc#1218730). - CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment (bsc#1218836). - CVE-2021-33631: Fixed an integer overflow in ext4_write_inline_data_end() (bsc#1219412). - CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code inside the brcm80211 component (bsc#1216702). - CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c (bsc#1219120). - CVE-2024-0775: Fixed use-after-free in __ext4_remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219053). - CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function (bsc#1218752). - CVE-2023-51782: Fixed use-after-free in rose_ioctl in net/rose/af_rose.c because of a rose_accept race condition (bsc#1218757). - CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). - CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988). - CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989). - CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987). - CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128). The following non-security bugs were fixed: - 9p: missing chunk of 'fs/9p: Do not update file type when updating file attributes' (git-fixes). - ACPICA: Avoid cache flush inside virtual machines (git-fixes). - GFS2: Flush the GFS2 delete workqueue before stopping the kernel threads (git-fixes). - KVM: s390: vsie: Fix STFLE interpretive execution identification (git-fixes bsc#1219022). - UAPI: ndctl: Fix g++-unsupported initialisation in headers (git-fixes). - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes). - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes). - USB: serial: option: add entry for Sierra EM9191 with new firmware (git-fixes). - USB: serial: option: fix FM101R-GL defines (git-fixes). - acpi/nfit: Require opt-in for read-only label configurations (git-fixes). - acpi/nfit: improve bounds checking for 'func' (git-fixes). - affs: fix basic permission bits to actually work (git-fixes). - aio: fix mremap after fork null-deref (git-fixes). - asix: Add check for usbnet_get_endpoints (git-fixes). - bnxt_en: Log unknown link speed appropriately (git-fixes). - build: Limit kernel-source build to architectures for which the kernel binary is built (bsc#1108281). - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (bsc#1219445). - chardev: fix error handling in cdev_device_add() (git-fixes). - configfs: fix a deadlock in configfs_symlink() (git-fixes). - configfs: fix a race in configfs_{,un}register_subsystem() (git-fixes). - configfs: fix a use-after-free in __configfs_open_file (git-fixes). - configfs: fix config_item refcnt leak in configfs_rmdir() (git-fixes). - configfs: fix memleak in configfs_release_bin_file (git-fixes). - configfs: new object reprsenting tree fragments (git-fixes). - configfs: provide exclusion between IO and removals (git-fixes). - configfs: stash the data we need into configfs_buffer at open time (git-fixes). - docs: Store the old kernel changelog entries in kernel-docs package (bsc#1218713). - ext4: Avoid freeing inodes on dirty list (bsc#1216989). - ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889). - fat: add ratelimit to fat*_ent_bread() (git-fixes). - fs/exofs: fix potential memory leak in mount option parsing (git-fixes). - fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters() (git-fixes). - fs/fat/file.c: issue flush after the writeback of FAT (git-fixes). - fs/file.c: initialize init_files.resize_wait (git-fixes). - fs: do not audit the capability check in simple_xattr_list() (git-fixes). - fs: ocfs2: namei: check return value of ocfs2_add_entry() (git-fixes). - fs: orangefs: fix error return code of orangefs_revalidate_lookup() (git-fixes). - fs: ratelimit __find_get_block_slow() failure message (git-fixes). - fs: warn about impending deprecation of mandatory locks (git-fixes). - gfs2: Allow lock_nolock mount to specify jid=X (git-fixes). - gfs2: Check sb_bsize_shift after reading superblock (git-fixes). - gfs2: Do not call dlm after protocol is unmounted (git-fixes). - gfs2: Do not set GFS2_RDF_UPTODATE when the lvb is updated (git-fixes). - gfs2: Do not skip dlm unlock if glock had an lvb (git-fixes). - gfs2: Fix inode height consistency check (git-fixes). - gfs2: Fix lru_count going negative (git-fixes). - gfs2: Fix marking bitmaps non-full (git-fixes). - gfs2: Fix possible data races in gfs2_show_options() (git-fixes). - gfs2: Fix sign extension bug in gfs2_update_stats (git-fixes). - gfs2: Fix use-after-free in gfs2_glock_shrink_scan (git-fixes). - gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free (git-fixes). - gfs2: Make sure FITRIM minlen is rounded up to fs block size (git-fixes). - gfs2: Special-case rindex for gfs2_grow (git-fixes). - gfs2: Wake up when sd_glock_disposal becomes zero (git-fixes). - gfs2: add validation checks for size of superblock (git-fixes). - gfs2: assign rgrp glock before compute_bitstructs (git-fixes). - gfs2: check for empty rgrp tree in gfs2_ri_update (git-fixes). - gfs2: check for live vs. read-only file system in gfs2_fitrim (git-fixes). - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (git-fixes). - gfs2: fix use-after-free on transaction ail lists (git-fixes). - gfs2: ignore negated quota changes (git-fixes). - gfs2: initialize transaction tr_ailX_lists earlier (git-fixes). - gfs2: report 'already frozen/thawed' errors (git-fixes). - gfs2: take jdata unstuff into account in do_grow (git-fixes). - gfs2_atomic_open(): fix O_EXCL|O_CREAT handling on cold dcache (git-fixes). - gtp: change NET_UDP_TUNNEL dependency to select (git-fixes). - help_next should increase position index (git-fixes). - iomap: sub-block dio needs to zeroout beyond EOF (git-fixes). - kernfs: Separate kernfs_pr_cont_buf and rename_lock (git-fixes). - kernfs: bring names in comments in line with code (git-fixes). - kernfs: fix use-after-free in __kernfs_remove (git-fixes). - libceph: use kernel_connect() (bsc#1219446). - libnvdimm/btt: Fix LBA masking during 'free list' population (git-fixes). - libnvdimm/btt: Fix a kmemdup failure check (git-fixes). - libnvdimm/btt: Remove unnecessary code in btt_freelist_init (git-fixes). - libnvdimm/btt: fix variable 'rc' set but not used (git-fixes). - libnvdimm/namespace: Fix a potential NULL pointer dereference (git-fixes). - libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value (git-fixes). - libnvdimm/pmem: Delete include of nd-core.h (git-fixes). - libnvdimm/pmem: fix a possible OOB access when read and write pmem (git-fixes). - libnvdimm/region: Fix label activation vs errors (git-fixes). - libnvdimm: Fix compilation warnings with W=1 (git-fixes). - libnvdimm: Out of bounds read in __nd_ioctl() (git-fixes). - libnvdimm: Validate command family indices (git-fixes). - libnvdimm: cover up changes in struct

Korrektur verfügbar

Veröffentlicht

2024-02-15T12:51:27Z

Aktualisiert

2026-02-04T02:23:05.390311Z

Technologie-Stack: system

Prüfen Sie Ihren Server →