SUSE-SU-2021:3748-1

SUSE-SU-2021:3748-1 · Security update for the Linux Kernel

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory (bsc#1188563). - CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349). - CVE-2021-33033: Fixed a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled (bsc#1186109). - CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rf_conn_info object (bsc#1190067). - CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673). - CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063). - CVE-2021-34556: Fixed side-channel attack via a Speculative Store Bypass via unprivileged BPF program that could have obtain sensitive information from kernel memory (bsc#1188983). - CVE-2021-35477: Fixed BPF stack frame pointer which could have been abused to disclose content of arbitrary kernel memory (bsc#1188985). - CVE-2021-42252: Fixed an issue inside aspeed_lpc_ctrl_mmap that could have allowed local attackers to access the Aspeed LPC control interface to overwrite memory in the kernel and potentially execute privileges (bnc#1190479). - CVE-2021-41864: Fixed prealloc_elems_and_freelist that allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317). - CVE-2021-42008: Fixed a slab out-of-bounds write in the decode_data function in drivers/net/hamradio/6pack.c. Input from a process that had the CAP_NET_ADMIN capability could have lead to root access (bsc#1191315). - CVE-2021-37159: Fixed use-after-free and a double free inside hso_free_net_device in drivers/net/usb/hso.c when unregister_netdev is called without checking for the NETREG_REGISTERED state (bnc#1188601). The following non-security bugs were fixed: - IB/hfi1: Fix abba locking issue with sc_disable() (git-fixes) - KVM: PPC: Book3S HV: Save host FSCR in the P7/8 path (bsc#1065729). - NFS: Do uncached readdir when we're seeking a cookie in an empty page cache (bsc#1191628). - NFS: Fix backport error - dir_cookie is a pointer to a u64, not a u64. - PM: base: power: do not try to use non-existing RTC for storing data (git-fixes). - SMB3.1.1: Fix ids returned in POSIX query dir (bsc#1190317). - SMB3.1.1: do not log warning message if server does not populate salt (bsc#1190317). - SMB3.1.1: fix mount failure to some servers when compression enabled (bsc#1190317). - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (bsc#1190317). - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (bsc#1190317). - SMB3: Add new info level for query directory (bsc#1190317). - SMB3: Add support for getting and setting SACLs (bsc#1190317). - SMB3: Fix mkdir when idsfromsid configured on mount (bsc#1190317). - SMB3: Resolve data corruption of TCP server info fields (bsc#1190317). - SMB3: add support for recognizing WSL reparse tags (bsc#1190317). - SMB3: avoid confusing warning message on mount to Azure (bsc#1190317). - SMB3: fix readpage for large swap cache (bsc#1190317). - SMB3: incorrect file id in requests compounded with open (bsc#1190317). - SMB3: update structures for new compression protocol definitions (bsc#1190317). - USB: cdc-acm: fix break reporting (git-fixes). - USB: cdc-acm: fix racy tty buffer accesses (git-fixes). - USB: iowarrior: fix control-message timeouts (git-fixes). - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (git-fixes). - USB: serial: keyspan: fix memleak on probe errors (git-fixes). - USB: serial: option: add Telit LN920 compositions (git-fixes). - USB: serial: option: add device id for Foxconn T99W265 (git-fixes). - USB: xhci: dbc: fix tty registration race (git-fixes). - bitmap: remove unused function declaration (git-fixes). - blktrace: Fix uaf in blk_trace access after removing by sysfs (bsc#1191452). - cdc_ncm: Set NTB format again after altsetting switch for Huawei devices (git-fixes). - ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1191888). - cifs: Add get_security_type_str function to return sec type (bsc#1190317). - cifs: Avoid field over-reading memcpy() (bsc#1190317). - cifs: Change SIDs in ACEs while transferring file ownership (bsc#1190317). - cifs: Clarify SMB1 code for POSIX Create (bsc#1190317). - cifs: Clarify SMB1 code for POSIX Lock (bsc#1190317). - cifs: Clarify SMB1 code for POSIX delete file (bsc#1190317). - cifs: Clarify SMB1 code for SetFileSize (bsc#1190317). - cifs: Clarify SMB1 code for UnixCreateSymLink (bsc#1190317). - cifs: Clarify SMB1 code for UnixSetPathInfo (bsc#1190317). - cifs: Clarify SMB1 code for delete (bsc#1190317). - cifs: Clarify SMB1 code for rename open file (bsc#1190317). - cifs: Display local UID details for SMB sessions in DebugData (bsc#1190317). - cifs: Do not use the original cruid when following DFS links for multiuser mounts (bsc#1190317). - cifs: Enable sticky bit with cifsacl mount option (bsc#1190317). - cifs: Fix cached_fid refcnt leak in open_shroot (bsc#1190317). - cifs: Fix chmod with modefromsid when an older ACE already exists (bsc#1190317). - cifs: Fix cifsacl ACE mask for group and others (bsc#1190317). - cifs: Fix double add page to memcg when cifs_readpages (bsc#1190317). - cifs: Fix in error types returned for out-of-credit situations (bsc#1190317). - cifs: Fix unix perm bits to cifsacl conversion for 'other' bits (bsc#1190317). - cifs: Grab a reference for the dentry of the cached directory during the lifetime of the cache (bsc#1190317). - cifs: If a corrupted DACL is returned by the server, bail out (bsc#1190317). - cifs: Make extract_hostname function public (bsc#1190317). - cifs: Make extract_sharename function public (bsc#1190317). - cifs: Print the address and port we are connecting to in generic_ip_connect() (bsc#1190317). - cifs: Retain old ACEs when converting between mode bits and ACL (bsc#1190317). - cifs: Silently ignore unknown oplock break handle (bsc#1190317). - cifs: add FALLOC_FL_INSERT_RANGE support (bsc#1190317). - cifs: add a function to get a cached dir based on its dentry (bsc#1190317). - cifs: add a timestamp to track when the lease of the cached dir was taken (bsc#1190317). - cifs: add shutdown support (bsc#1190317). - cifs: add support for FALLOC_FL_COLLAPSE_RANGE (bsc#1190317). - cifs: added WARN_ON for all the count decrements (bsc#1190317). - cifs: ask for more credit on async read/write code paths (bsc#1190317). - cifs: avoid extra calls in posix_info_parse (bsc#1190317). - cifs: check pointer before freeing (bsc#1190317). - cifs: check the timestamp for the cached dirent when deciding on revalidate (bsc#1190317). - cifs: clarify SMB1 code for UnixCreateHardLink (bsc#1190317). - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (bsc#1190317). - cifs: cleanup misc.c (bsc#1190317). - cifs: compute full_path already in cifs_readdir() (bsc#1190317). - cifs: constify path argument of ->make_node() (bsc#1190317). - cifs: constify pathname arguments in a bunch of helpers (bsc#1190317). - cifs: convert list_for_each to entry variant in cifs_debug.c (bsc#1190317). - cifs: convert list_for_each to entry variant in smb2misc.c (bsc#1190317). - cifs: convert to use be32_add_cpu() (bsc#1190317). - cifs: create sd context must be a multiple of 8 (bsc#1190317). - cifs: detect dead connections only when echoes are enabled (bsc#1190317). - cifs: do not fail __smb_send_rqst if non-fatal signals are pending (bsc#1190317). - cifs: dump Security Type info in DebugData (bsc#1190317). - cifs: fix DFS mount with cifsacl/modefromsid (bsc#1190317). - cifs: fix NULL dereference in smb2_check_mess

Corrección disponible

Publicación

2021-11-19T16:17:29Z

Actualización

2026-02-04T02:40:38.561187Z

Pila tecnológica: system

Comprueba tu servidor →