SUSE-SU-2021:2687-1
SUSE-SU-2021:2687-1 · Security update for the Linux Kernel
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876). - CVE-2021-21781: Fixed a information disclosure vulnerability in the ARM SIGPAGE (bsc#1188445). - CVE-2021-22543: Fixed improper handling of VM_IO|VM_PFNMAP vmas in KVM, which could bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allowed users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation (bsc#1186482). - CVE-2021-37576: Fixed an issue on the powerpc platform, where a KVM guest OS user could cause host OS memory corruption via rtas_args.nargs (bsc#1188838). - CVE-2021-3609: Fixed a potential local privilege escalation in the CAN BCM networking protocol (bsc#1187215). - CVE-2021-3612: Fixed an out-of-bounds memory write flaw in the joystick devices subsystem. This flaw allowed a local user to crash the system or possibly escalate their privileges on the system. (bsc#1187585) - CVE-2021-35039: Fixed mishandling of signature verification. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, did not occur for a module.sig_enforce=1 command-line argument (bsc#1188080). The following non-security bugs were fixed: - ACPI: AMBA: Fix resource name in /proc/iomem (git-fixes). - ACPI: APEI: fix synchronous external aborts in user-mode (git-fixes). - ACPI: DPTF: Fix reading of attributes (git-fixes). - ACPI: EC: Make more Asus laptops use ECDT _GPE (git-fixes). - ACPI: PM / fan: Put fan device IDs into separate header file (git-fixes). - ACPI: bus: Call kobject_put() in acpi_init() error path (git-fixes). - ACPI: processor idle: Fix up C-state latency if not ordered (git-fixes). - ACPI: property: Constify stubs for CONFIG_ACPI=n case (git-fixes). - ACPI: resources: Add checks for ACPI IRQ override (git-fixes). - ACPI: sysfs: Fix a buffer overrun problem with description_show() (git-fixes). - ACPI: video: Add quirk for the Dell Vostro 3350 (git-fixes). - ACPICA: Fix memory leak caused by _CID repair function (git-fixes). - ALSA: ac97: fix PM reference leak in ac97_bus_remove() (git-fixes). - ALSA: bebob: add support for ToneWeal FW66 (git-fixes). - ALSA: firewire-motu: fix detection for S/PDIF source on optical interface in v2 protocol (git-fixes). - ALSA: firewire-motu: fix stream format for MOTU 8pre FireWire (git-fixes). - ALSA: hda/realtek: Add another ALC236 variant support (git-fixes). - ALSA: hda/realtek: Apply LED fixup for HP Dragonfly G1, too (git-fixes). - ALSA: hda/realtek: Fix bass speaker DAC mapping for Asus UM431D (git-fixes). - ALSA: hda/realtek: Fix pop noise and 2 Front Mic issues on a machine (git-fixes). - ALSA: hda/realtek: Improve fixup for HP Spectre x360 15-df0xxx (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 830 G8 Notebook PC (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook x360 830 G8 (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G8 (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 450 G8 (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 630 G8 (git-fixes). - ALSA: hda: Add IRQ check for platform_get_irq() (git-fixes). - ALSA: hda: intel-dsp-cfg: add missing ElkhartLake PCI ID (git-fixes). - ALSA: hdmi: Expose all pins on MSI MS-7C94 board (git-fixes). - ALSA: intel8x0: Fix breakage at ac97 clock measurement (git-fixes). - ALSA: isa: Fix error return code in snd_cmi8330_probe() (git-fixes). - ALSA: pcm - fix mmap capability check for the snd-dummy driver (git-fixes). - ALSA: pcm: Call substream ack() method upon compat mmap commit (git-fixes). - ALSA: pcm: Fix mmap capability check (git-fixes). - ALSA: ppc: fix error return code in snd_pmac_probe() (git-fixes). - ALSA: sb: Fix potential ABBA deadlock in CSP driver (git-fixes). - ALSA: sb: Fix potential double-free of CSP mixer elements (git-fixes). - ALSA: usb-audio: Add missing proc text entry for BESPOKEN type (git-fixes). - ALSA: usb-audio: Add registration quirk for JBL Quantum headsets (git-fixes). - ALSA: usb-audio: Fix OOB access at proc output (git-fixes). - ALSA: usb-audio: fix rate on Ozone Z90 USB headset (git-fixes). - ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count (git-fixes). - ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions (git-fixes). - ALSA: usb-audio: scarlett2: Fix data_mutex lock (git-fixes). - ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values (git-fixes). - ALSA: usb-audio: scarlett2: Fix wrong resume call (git-fixes). - ALSA: usb-audio: scarlett2: Read mixer volumes at init time (git-fixes). - ALSA: usb-audio: scarlett2: Read mux at init time (git-fixes). - ALSA: usx2y: Avoid camelCase (git-fixes). - ALSA: usx2y: Do not call free_pages_exact() with NULL address (git-fixes). - ARM: ensure the signal page contains defined contents (bsc#1188445). - ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters (git-fixes). - ASoC: Intel: sof_sdw: add SOF_RT715_DAI_ID_FIX for AlderLake (git-fixes). - ASoC: Intel: sof_sdw: add mutual exclusion between PCH DMIC and RT715 (git-fixes). - ASoC: SOF: loader: Use snd_sof_dsp_block_read() instead sof_block_read() (git-fixes). - ASoC: atmel-i2s: Fix usage of capture and playback at the same time (git-fixes). - ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK (git-fixes). - ASoC: fsl_spdif: Fix error handler with pm_runtime_enable (git-fixes). - ASoC: fsl_spdif: Fix unexpected interrupt after suspend (git-fixes). - ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() (git-fixes). - ASoC: img: Fix PM reference leak in img_i2s_in_probe() (git-fixes). - ASoC: intel/boards: add missing MODULE_DEVICE_TABLE (git-fixes). - ASoC: max98373-sdw: add missing memory allocation check (git-fixes). - ASoC: max98373-sdw: use first_hw_init flag on resume (git-fixes). - ASoC: mediatek: mtk-btcvsd: Fix an error handling path in 'mtk_btcvsd_snd_probe()' (git-fixes). - ASoC: rk3328: fix missing clk_disable_unprepare() on error in rk3328_platform_probe() (git-fixes). - ASoC: rsnd: tidyup loop on rsnd_adg_clk_query() (git-fixes). - ASoC: rt1308-sdw: use first_hw_init flag on resume (git-fixes). - ASoC: rt5631: Fix regcache sync errors on resume (git-fixes). - ASoC: rt5682-sdw: set regcache_cache_only false before reading RT5682_DEVICE_ID (git-fixes). - ASoC: rt5682-sdw: use first_hw_init flag on resume (git-fixes). - ASoC: rt5682: Disable irq on shutdown (git-fixes). - ASoC: rt5682: Fix a problem with error handling in the io init function of the soundwire (git-fixes). - ASoC: rt5682: fix getting the wrong device id when the suspend_stress_test (git-fixes). - ASoC: rt700-sdw: use first_hw_init flag on resume (git-fixes). - ASoC: rt711-sdw: use first_hw_init flag on resume (git-fixes). - ASoC: rt715-sdw: use first_hw_init flag on resume (git-fixes). - ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (git-fixes). - ASoC: soc-pcm: fix the return value in dpcm_apply_symmetry() (git-fixes). - ASoC: tegra: Set driver_name=tegra for all machine drivers (git-fixes). - ASoC: wm_adsp: Correct wm_coeff_tlv_get handling (git-fixes). - Bluetooth: Fix alt settings for incoming SCO with transparent coding format (git-fixes). - Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event (git-fixes). - Bluetooth: Fix the HCI to MGMT status conversion table (git-fixes). - Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails (git-fixes). - Bluetooth: L2CAP: Fix invalid access on ECRED Connection response (git-fixes). - Bluetooth: Remove spurious error message (git-fixes). - Bluetooth: Shutdown controller after workqueues are flushed or cancelled (git-fixes). - Bluetooth: btintel:
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-64kb SUSE:Linux Enterprise Module for Basesystem 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-default-base SUSE:Linux Enterprise Module for Basesystem 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1.18.10.1
Actualiza a 5.3.18-59.19.1.18.10.1
kernel-preempt SUSE:Linux Enterprise Module for Basesystem 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-zfcpdump SUSE:Linux Enterprise Module for Basesystem 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-preempt SUSE:Linux Enterprise Module for Development Tools 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-default SUSE:Linux Enterprise Live Patching 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-livepatch-sle15-sp3_update_5 SUSE:Linux Enterprise Live Patching 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 1-7.3.1
Actualiza a 1-7.3.1
kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
kernel-preempt SUSE:Linux Enterprise Workstation Extension 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.3.18-59.19.1
Actualiza a 5.3.18-59.19.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2021/suse-su-20212687-1/
- https://bugzilla.suse.com/1065729
- https://bugzilla.suse.com/1085224
- https://bugzilla.suse.com/1094840
- https://bugzilla.suse.com/1113295
- https://bugzilla.suse.com/1152472
- https://bugzilla.suse.com/1152489
- https://bugzilla.suse.com/1153274
- https://bugzilla.suse.com/1154353
- https://bugzilla.suse.com/1155518
- https://bugzilla.suse.com/1156395
- https://bugzilla.suse.com/1170511
- https://bugzilla.suse.com/1176447
- https://bugzilla.suse.com/1176940
- https://bugzilla.suse.com/1179243
- https://bugzilla.suse.com/1180092
- https://bugzilla.suse.com/1180814
- https://bugzilla.suse.com/1183871
- https://bugzilla.suse.com/1184114
- https://bugzilla.suse.com/1184350
- https://bugzilla.suse.com/1184631
- https://bugzilla.suse.com/1184804
- https://bugzilla.suse.com/1185308
- https://osv.dev/vulnerability/SUSE-SU-2021:2687-1