SUSE-SU-2024:3195-1

SUSE-SU-2024:3195-1 · Security update for the Linux Kernel

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). - CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326). - CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315). - CVE-2024-43911: Fix NULL dereference at band check in starting tx ba session (bsc#1229827). - CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409). - CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481). - CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754). - CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503) - CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495). - CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808). - CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720). - CVE-2024-36881: Fix reset ptes when close() for wr-protected (bsc#1225718). - CVE-2024-42316: Fix div-by-zero in vmpressure_calc_level() (bsc#1229353). - CVE-2024-43855: Fix deadlock between mddev_suspend and flush bio (bsc#1229342). - CVE-2024-43864: Fix CT entry update leaks of modify header context (bsc#1229496). - CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630). - CVE-2024-42109: Unconditionally flush pending work before notifier (bsc#1228505). - CVE-2024-41084: Avoid null pointer dereference in region lookup (bsc#1228472). - CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761) - CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623) - CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874) - CVE-2024-27079: Fix NULL domain on device release (bsc#1223742). - CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427). - CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510). - CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415). - CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803). - CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335). - CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967). - CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634). - CVE-2024-26809: Release elements in clone only from destroy path (bsc#1222633). - CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877). - CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297). - CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535). - CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374). - CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391). - CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314) - CVE-2024-27433: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711). - CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801) - CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074) - CVE-2024-40920: Fix suspicious rcu usage in br_mst_set_state (bsc#1227781). - CVE-2024-40921: Pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-36979: Fix vlan use-after-free (bsc#1226604). - CVE-2024-26590: Fix inconsistent per-file compression format (bsc#1220252). - CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582). - CVE-2024-42270: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404). - CVE-2024-42269: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402). - CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382) - CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383) - CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357) - CVE-2024-43854: Initialize integrity buffer to zero before writing it to media (bsc#1229345) - CVE-2024-42322: Properly dereference pe in ip_vs_add_service (bsc#1229347) - CVE-2024-42290: Handle runtime power management correctly (bsc#1229379). - CVE-2024-42318: Do not lose track of restrictions on cred_transfer (bsc#1229351). - CVE-2023-52889: Fix null pointer deref when receiving skb during sock creation (bsc#1229287). - CVE-2024-42295: Handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370). - CVE-2024-43850: Fix refcount imbalance seen during bwmon_remove (bsc#1229316). - CVE-2024-43831: Handle invalid decoder vsi (bsc#1229309). - CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301). - CVE-2024-41007: Use signed arithmetic in tcp_rtx_probe0_timed_out() (bsc#1227863). - CVE-2024-42281: Fix a segment issue when downgrading gso_size (bsc#1229386). - CVE-2024-26669: Fix chain template offload (bsc#1222350). - CVE-2024-26677: Blacklist e7870cf13d20 (' Fix delayed ACKs to not set the reference serial number') (bsc#1222387) - CVE-2024-41050: Cyclic allocation of msg_id to avoid reuse (bsc#1228499). - CVE-2024-41051: Wait for ondemand_object_worker to finish when dropping object (bsc#1228468). - CVE-2024-41074: Set object to close if ondemand_id < 0 in copen (bsc#1228643). - CVE-2024-41075: Add consistency check for copen/cread (bsc#1228646). - CVE-2024-41012: Remove locks reliably when fcntl/close race is detected (bsc#1228247). - CVE-2024-41080: Fix possible deadlock in io_register_iowq_max_workers() (bsc#1228616). - CVE-2024-42246: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989). - CVE-2024-42159: Fix sanitise num_phys (bsc#1228754). - CVE-2024-42241: Disable PMD-sized page cache if needed (bsc#1228986). - CVE-2024-42245: Revert 'sched/fair: Make sure to try to detach at least one movable task' (bsc#1228978). - CVE-2024-26735: Fix possible use-after-free and null-ptr-deref (bsc#1222372). - CVE-2024-26837: Race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973). - CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733). - CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722). - CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727). - CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720). - CVE-2024-38662: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885). - CVE-2024-40938: Fix d_parent walk (bsc#1227840). - CVE-2024-42247: Avoid unaligned 64-bit memory accesses (bsc#1228988). - CVE-2024-41010: Fix too early release of tcx_entry (bsc#1228021). - CVE-2024-42106: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493). - CVE-2024-42095: Fix Errata i2310 with RX FIFO level check (bsc#1228446). - CVE-2024-41068: Fix sclp_init() cleanup on failure (bsc#1228579). - CVE-2024-42138: Fix double memory deallocation in case of invalid INI file (bsc#1228500). - CVE-2024-42107: Do not process extts if PTP is disabled (bsc#1228494). - CVE-2024-42139: Fix improper extts handling (bsc#1228503). - CVE-2024-42110: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501). - CVE-2024-42113: Initialize num_q_vectors for MSI/INTx interrupts (bsc#1228568). - CVE-2024-42148: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487). - CVE-2024-42142: E-switch, Create ingress ACL when needed (bsc#1228491). - CVE-2024-42073: Fix memory corruptions on Spectrum-4 systems (bsc#1228457). - CVE-2024-42162: Account for stopped queues when reading NIC stats (bsc#1228706). - CVE-2024-42082: Remove WARN() from __xdp_reg_mem_model() (bsc#1228482). - CVE-2024-40978: Fix crash while reading debugfs attribute (bsc#1227929). - CVE-2024-41000: Prefer different overflow check (bsc#1227867). - CVE-2024-40995: Fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830). - CVE-2024-42161: Avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756). - CVE-2024-41069:

Corrección disponible

Publicación

2024-09-10T14:10:24Z

Actualización

2026-02-04T02:36:48.443793Z

Pila tecnológica: system

Comprueba tu servidor →