SUSE-SU-2023:0145-1

SUSE-SU-2023:0145-1 · Security update for the Linux Kernel

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4662: Fixed a recursive locking violation in usb-storage that can cause the kernel to deadlock. (bsc#1206664) - CVE-2022-3564: Fixed a bug which could lead to use after free, it was found in the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. (bsc#1206073) - CVE-2022-3108: Fixed a bug in kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c where a lack of check of the return value of kmemdup() could lead to a NULL pointer dereference. (bsc#1206389) - CVE-2023-23454: Fixed a type confusion bug in the CBQ network scheduler which could lead to a use-after-free (bsc#1207036) - CVE-2022-3107: Fixed a null pointer dereference caused by a missing check of the return value of kvmalloc_array. (bsc#1206395) - CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168). The following non-security bugs were fixed: - arm64: alternative: Use true and false for boolean values (git-fixes) - arm64: cmpwait: Clear event register before arming exclusive monitor (git-fixes) - arm64: Fix minor issues with the dcache_by_line_op macro (git-fixes) - arm64: fix possible spectre-v1 in ptrace_hbp_get_event() (git-fixes) - arm64: fix possible spectre-v1 write in ptrace_hbp_set_event() (git-fixes) - arm64: ftrace: do not adjust the LR value (git-fixes) - arm64: io: Ensure calls to delay routines are ordered against prior (git-fixes) - arm64: io: Ensure value passed to __iormb() is held in a 64-bit (git-fixes) - arm64: jump_label.h: use asm_volatile_goto macro instead of 'asm (git-fixes) - arm64: make secondary_start_kernel() notrace (git-fixes) - arm64: makefile fix build of .i file in external module case (git-fixes) - arm64: ptrace: remove addr_limit manipulation (git-fixes) - arm64: rockchip: Force CONFIG_PM on Rockchip systems (git-fixes) - arm64: smp: Handle errors reported by the firmware (git-fixes) - arm64/kvm: consistently handle host HCR_EL2 flags (git-fixes) - Bluetooth: hci_qca: Fix the teardown problem for real (git-fixes). - CDC-NCM: remove 'connected' log message (git-fixes). - ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (bsc#1207195). - flexfiles: enforce per-mirror stateid only for v4 DSes (git-fixes). - flexfiles: use per-mirror specified stateid for IO (git-fixes). - fs: nfs: Fix possible null-pointer dereferences in encode_attrs() (git-fixes). - ibmveth: Always stop tx queues during close (bsc#1065729). - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (bsc#1207168). - kABI: mitigate new ufs_stats field (git-fixes). - lockd: fix decoding of TEST results (git-fixes). - media: Do not let tvp5150_get_vbi() go out of vbi_ram_default array (git-fixes). - media: i2c: tvp5150: remove useless variable assignment in tvp5150_set_vbi() (git-fixes). - memcg, kmem: further deprecate kmem.limit_in_bytes (bsc#1206896). - memcg: Fix possible use-after-free in memcg_write_event_control() (bsc#1206344). - mm, page_alloc: avoid expensive reclaim when compaction may not succeed (bsc#1204250). - module: set MODULE_STATE_GOING state when a module fails to load (git-fixes). - move new members of struct usbnet to end (git-fixes). - net :sunrpc :clnt :Fix xps refcount imbalance on the error path (git-fixes). - net: kalmia: clean up bind error path (git-fixes). - net: kalmia: fix memory leaks (git-fixes). - net: sched: atm: dont intepret cls results when asked to drop (bsc#1207036). - net: sched: cbq: dont intepret cls results when asked to drop (bsc#1207036). - net: sunrpc: Fix off-by-one issues in 'rpc_ntop6' (git-fixes). - net: usb: asix: ax88772_bind return error when hw_reset fail (git-fixes). - net: usb: asix: init MAC address buffers (git-fixes). - net: usb: qmi_wwan: add Quectel EM160R-GL (git-fixes). - net: usb: qmi_wwan: add Telit 0x103a composition (git-fixes). - net: usb: qmi_wwan: Add the BroadMobi BM818 card (git-fixes). - net: usb: qmi_wwan: add u-blox 0x1342 composition (git-fixes). - net: usb: qmi_wwan: restore mtu min/max values after raw_ip switch (git-fixes). - net: usb: qmi_wwan: Set DTR quirk for MR400 (git-fixes). - net: usb: rtl8150: demote allmulti message to dev_dbg() (git-fixes). - net/usb/kalmia: use ARRAY_SIZE for various array sizing calculations (git-fixes). - NFS Handle missing attributes in OPEN reply (bsc#1203740). - NFS: Correct size calculation for create reply length (git-fixes). - NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails (git-fixes). - NFS: Fix an Oops in nfs_d_automount() (git-fixes). - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup (git-fixes). - NFS: Fix memory leaks in nfs_pageio_stop_mirroring() (git-fixes). - NFS: Fix NULL pointer dereference of dev_name (git-fixes). - NFS: fix PNFS_FLEXFILE_LAYOUT Kconfig default (git-fixes). - NFS: nfs_compare_mount_options always compare auth flavors (git-fixes). - NFS: nfs_find_open_context() may only select open files (git-fixes). - NFS: nfs4clinet: check the return value of kstrdup() (git-fixes). - NFS: swap IO handling is slightly different for O_DIRECT IO (git-fixes). - NFS: swap-out must always use STABLE writes (git-fixes). - NFS: we do not support removing system.nfs4_acl (git-fixes). - NFS4: Fix kmemleak when allocate slot failed (git-fixes). - NFSD: allow fh_want_write to be called twice (git-fixes). - NFSD: fix a warning in __cld_pipe_upcall() (git-fixes). - NFSD: Fix svc_xprt refcnt leak when setup callback client failed (git-fixes). - NFSD: fix wrong check in write_v4_end_grace() (git-fixes). - NFSD: Keep existing listeners on portlist error (git-fixes). - NFSD: Return EPERM, not EACCES, in some SETATTR cases (git-fixes). - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data (git-fixes). - NFSD4: fix crash on writing v4_end_grace before nfsd startup (git-fixes). - NFSv2: Fix eof handling (git-fixes). - NFSv2: Fix write regression (git-fixes). - NFSv4 expose nfs_parse_server_name function (git-fixes). - NFSv4 only print the label when its queried (git-fixes). - NFSv4 remove zero number of fs_locations entries error check (git-fixes). - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes). - NFSv4: Fix open create exclusive when the server reboots (git-fixes). - NFSv4: Fix return value in nfs_finish_open() (git-fixes). - NFSv4: Fix return values for nfs4_file_open() (git-fixes). - NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation recall (git-fixes). - NFSv4.1: Fix uninitialised variable in devicenotify (git-fixes). - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes). - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes). - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes). - NFSv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes). - NFSv4.2: Fix initialisation of struct nfs4_label (git-fixes). - NFSv4.2: Fixup CLONE dest file size for zero-length count (git-fixes). - NFSv4.x: Fail client initialisation if state manager thread can't run (git-fixes). - NFSv4.x: fix lock recovery during delegation recall (git-fixes). - NFSv4/pNFS: Always return layout stats on layout return for flexfiles (git-fixes). - pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process() (git-fixes). - powerpc: Force inlining of cpu_has_feature() to avoid build failure (bsc#1065729). - powerpc: improve handling of unrecoverable system reset (bsc#1065729). - powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (bsc#1065729). - powerpc/64: Init jump labels before parse_early_param() (bsc#1065729). - powerpc/64/module: REL32 relocation range check (bsc#1065729). - powerpc/64s/hash: Fix stab_rr off by one initialization (bsc#1065729). - powerpc/64s/pgtable: fix an undefined beha

Corrección disponible

Publicación

2023-07-06T01:12:26Z

Actualización

2026-02-04T02:30:06.947839Z

Pila tecnológica: system

Comprueba tu servidor →