p PatchFirst

SUSE-SU-2022:0198-1

SUSE-SU-2022:0198-1 · Security update for the Linux Kernel

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2022-0322: Fixed a denial of service in SCTP sctp_addto_chunk (bsc#1194985). - CVE-2021-4197: Fixed a cgroup issue where lower privileged processes could write to fds of lower privileged ones that could lead to privilege escalation (bsc#1194302). - CVE-2021-46283: nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace (bnc#1194518). - CVE-2021-4135: Fixed an information leak in the nsim_bpf_map_alloc function (bsc#1193927). - CVE-2021-4202: Fixed a race condition during NFC device remove which could lead to a use-after-free memory corruption (bsc#1194529) - CVE-2021-4083: A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allowed a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4 (bnc#1193727). - CVE-2021-4149: Fixed a locking condition in btrfs which could lead to system deadlocks (bsc#1194001). - CVE-2021-45485: In the IPv6 implementation in net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses (bnc#1194094). - CVE-2021-45486: In the IPv4 implementation in net/ipv4/route.c has an information leak because the hash table is very small (bnc#1194087). The following non-security bugs were fixed: - ACPI: APD: Check for NULL pointer after calling devm_ioremap() (git-fixes). - ACPI: Add stubs for wakeup handler functions (git-fixes). - ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes (git-fixes). - ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls (git-fixes). - ALSA: ctl: Fix copy of updated id with element read/write (git-fixes). - ALSA: drivers: opl3: Fix incorrect use of vp->state (git-fixes). - ALSA: hda/hdmi: Disable silent stream on GLK (git-fixes). - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform (git-fixes). - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows (git-fixes). - ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED (git-fixes). - ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100 (git-fixes). - ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6 (git-fixes). - ALSA: hda/realtek: Fix quirk for Clevo NJ51CU (git-fixes). - ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1 (git-fixes). - ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers (git-fixes). - ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ (git-fixes). - ALSA: hda: Add missing rwsem around snd_ctl_remove() calls (git-fixes). - ALSA: hda: Make proper use of timecounter (git-fixes). - ALSA: jack: Add missing rwsem around snd_ctl_remove() calls (git-fixes). - ALSA: jack: Check the return value of kstrdup() (git-fixes). - ALSA: oss: fix compile error when OSS_DEBUG is enabled (git-fixes). - ALSA: pcm: oss: Fix negative period/buffer sizes (git-fixes). - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() (git-fixes). - ALSA: pcm: oss: Limit the period size to 16MB (git-fixes). - ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID (git-fixes). - ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk (git-fixes). - ASoC: codecs: wcd934x: handle channel mappping list correctly (git-fixes). - ASoC: codecs: wcd934x: return correct value from mixer put (git-fixes). - ASoC: codecs: wcd934x: return error code correctly from hw_params (git-fixes). - ASoC: codecs: wsa881x: fix return values from kcontrol put (git-fixes). - ASoC: cs42l42: Correct configuring of switch inversion from ts-inv (git-fixes). - ASoC: cs42l42: Disable regulators if probe fails (git-fixes). - ASoC: cs42l42: Use device_property API instead of of_property (git-fixes). - ASoC: fsl_asrc: refine the check of available clock divider (git-fixes). - ASoC: fsl_mqs: fix MODULE_ALIAS (git-fixes). - ASoC: mediatek: Check for error clk pointer (git-fixes). - ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s (git-fixes). - ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent() (git-fixes). - ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer (git-fixes). - ASoC: rt5663: Handle device_property_read_u32_array error codes (git-fixes). - ASoC: samsung: idma: Check of ioremap return value (git-fixes). - ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked() (git-fixes). - ASoC: sunxi: fix a sound binding broken reference (git-fixes). - ASoC: tegra: Fix kcontrol put callback in ADMAIF (git-fixes). - ASoC: tegra: Fix kcontrol put callback in AHUB (git-fixes). - ASoC: tegra: Fix kcontrol put callback in DMIC (git-fixes). - ASoC: tegra: Fix kcontrol put callback in DSPK (git-fixes). - ASoC: tegra: Fix kcontrol put callback in I2S (git-fixes). - ASoC: tegra: Fix wrong value type in ADMAIF (git-fixes). - ASoC: tegra: Fix wrong value type in DMIC (git-fixes). - ASoC: tegra: Fix wrong value type in DSPK (git-fixes). - ASoC: tegra: Fix wrong value type in I2S (git-fixes). - ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA (git-fixes). - Add cherry-picked IDs for qemu fw_cfg patches - Bluetooth: L2CAP: Fix using wrong mode (git-fixes). - Bluetooth: bfusb: fix division by zero in send path (git-fixes). - Bluetooth: btmtksdio: fix resume failure (git-fixes). - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb() (git-fixes). - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails (git-fixes). - Bluetooth: hci_bcm: Check for error irq (git-fixes). - Bluetooth: hci_qca: Stop IBS timer during BT OFF (git-fixes). - Bluetooth: stop proccessing malicious adv data (git-fixes). - Documentation: ACPI: Fix data node reference documentation (git-fixes). - Documentation: dmaengine: Correctly describe dmatest with channel unset (git-fixes). - Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization (git-fixes). - HID: add USB_HID dependancy to hid-chicony (git-fixes). - HID: add USB_HID dependancy to hid-prodikeys (git-fixes). - HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option (git-fixes). - HID: bigbenff: prevent null pointer dereference (git-fixes). - HID: google: add eel USB id (git-fixes). - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad (git-fixes). - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc (git-fixes). - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init (git-fixes). - HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init (git-fixes). - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover (git-fixes). - Input: appletouch - initialize work before device registration (git-fixes). - Input: atmel_mxt_ts - fix double free in mxt_read_info_block (git-fixes). - Input: elantech - fix stack out of bound access in elantech_change_report_id() (git-fixes). - Input: i8042 - add deferred probe support (bsc#1190256). - Input: i8042 - enable deferred probe quirk for ASUS UM325UA (bsc#1190256). - Input: max8925_onkey - do not mark comment as kernel-doc (git-fixes). - Input: spaceball - fix parsing of movement data packets (git-fixes). - Input: ti_am335x_tsc - fix STEPCONFIG setup for Z

Corrección disponible

Publicación
Actualización

Pila tecnológica: system

Productos y versiones afectados

  • kernel-64kb SUSE:Linux Enterprise Module for Basesystem 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-default-base SUSE:Linux Enterprise Module for Basesystem 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1.150300.18.27.1

    Actualiza a 5.3.18-150300.59.43.1.150300.18.27.1

  • kernel-preempt SUSE:Linux Enterprise Module for Basesystem 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-zfcpdump SUSE:Linux Enterprise Module for Basesystem 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-preempt SUSE:Linux Enterprise Module for Development Tools 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-default SUSE:Linux Enterprise Live Patching 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-livepatch-sle15-sp3_update_12 SUSE:Linux Enterprise Live Patching 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 1-150300.7.3.1

    Actualiza a 1-150300.7.3.1

  • kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-preempt SUSE:Linux Enterprise Workstation Extension 15 SP3

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-default SUSE:Linux Enterprise Micro 5.1

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1

    Actualiza a 5.3.18-150300.59.43.1

  • kernel-default-base SUSE:Linux Enterprise Micro 5.1

    Intervalos de versiones afectados
    • ECOSYSTEM: < 5.3.18-150300.59.43.1.150300.18.27.1

    Actualiza a 5.3.18-150300.59.43.1.150300.18.27.1

Fuentes originales

Comprueba tu servidor →