SUSE-SU-2024:1669-1

SUSE-SU-2024:1669-1 · Security update for the Linux Kernel

Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.

Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824). - CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585). - CVE-2022-48619: Fixed a denial-of-service issue in drivers/input/input.c (bsc#1218220). - CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416). - CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456). - CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418). - CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219295). - CVE-2021-46932: Initialized work before appletouch device registration (bsc#1220444). - CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238). - CVE-2023-52475: Fixed a use-after-free in powermate_config_complete() (bsc#1220649). - CVE-2023-52445: Fixed a use-after-free on context disconnection in pvrusb2 (bsc#1220241). - CVE-2023-52429: Limited the number of targets and parameter size area for device mapper (bsc#1219146). - CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl() related to a vcc_recvmsg race condition (bsc#1218730). - CVE-2023-51782: Fixed a use-after-free in rose_ioctl() related to a rose_accept race condition (bsc#1218757). - CVE-2023-31083: Fixed a NULL pointer dereference in hci_uart_tty_ioctl() (bsc#1210780). The following non-security bugs were fixed: - KVM: VMX: Move VERW closer to VMentry for MDS mitigation (git-fixes). - KVM: VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (git-fixes). - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (bsc#1222619). - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (git-fixes). - x86/bugs: Add asm helpers for executing VERW (bsc#1213456). - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (git-fixes). - x86/entry_32: Add VERW just before userspace transition (git-fixes). - x86/entry_64: Add VERW just before userspace transition (git-fixes).

Korrektur verfügbar

Veröffentlicht

2024-05-16T08:50:07Z

Aktualisiert

2026-02-04T04:32:23.717422Z

Technologie-Stack: system

Prüfen Sie Ihren Server →