p PatchFirst

SUSE-SU-2022:2721-1

SUSE-SU-2022:2721-1 · Security update for the Linux Kernel

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

The SUSE Linux Enterprise 12 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36946: Fixed an incorrect packet trucation operation which could lead to denial of service (bnc#1201940). - CVE-2022-20166: Fixed several possible memory safety issues due to unsafe operations (bsc#1200598). - CVE-2020-15393: Fixed a memory leak in the usbtest driver which could lead to denial of service (bnc#1173514). - CVE-2020-36558: Fixed a race condition involving VT_RESIZEX which could lead to a NULL pointer dereference and general protection fault (bnc#1200910). - CVE-2020-36557: Fixed a race condition between the VT_DISALLOCATE ioctl and closing/opening of TTYs could lead to a use-after-free (bnc#1201429). - CVE-2021-33656: Fixed memory out of bounds write related to ioctl cmd PIO_FONT (bnc#1201636). - CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635). - CVE-2022-1462: Fixed an out-of-bounds read flaw in the TTY subsystem (bnc#1198829). - CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762). - CVE-2022-2318: Fixed a use-after-free vulnerability in the timer handler in Rose subsystem that allowed unprivileged attackers to crash the system (bsc#1201251). - CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free (bnc#1196973). The following non-security bugs were fixed: - kvm: emulate: Do not adjust size of fastop and setcc subroutines (bsc#1201930). - kvm: emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).

Corrección disponible

Publicación
Actualización

Pila tecnológica: system

Productos y versiones afectados

  • kernel-default SUSE:Linux Enterprise Server 12 SP2-BCL

    Intervalos de versiones afectados
    • ECOSYSTEM: < 4.4.121-92.181.1

    Actualiza a 4.4.121-92.181.1

  • kernel-source SUSE:Linux Enterprise Server 12 SP2-BCL

    Intervalos de versiones afectados
    • ECOSYSTEM: < 4.4.121-92.181.1

    Actualiza a 4.4.121-92.181.1

  • kernel-syms SUSE:Linux Enterprise Server 12 SP2-BCL

    Intervalos de versiones afectados
    • ECOSYSTEM: < 4.4.121-92.181.1

    Actualiza a 4.4.121-92.181.1

Fuentes originales

Comprueba tu servidor →