SUSE-SU-2021:0742-1
SUSE-SU-2021:0742-1 · Security update for the Linux Kernel
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bug was fixed: - CVE-2021-3348: Fixed a use-after-free read in nbd_queue_rq (bsc#1181504). The following non-security bugs were fixed: - ACPI: configfs: add missing check after configfs_register_default_group() (git-fixes). - ACPI: property: Fix fwnode string properties matching (git-fixes). - ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes). - ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (git-fixes). - arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true (bsc#1182560) - ASoC: cs42l56: fix up error handling in probe (git-fixes). - ath9k: fix data bus crash when setting nf_override via debugfs (git-fixes). - block: fix use-after-free in disk_part_iter_next (bsc#1182610). - Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function (git-fixes). - Bluetooth: drop HCI device reference before return (git-fixes). - Bluetooth: Fix initializing response id after clearing struct (git-fixes). - Bluetooth: Put HCI device if inquiry procedure interrupts (git-fixes). - bonding: Fix reference count leak in bond_sysfs_slave_add (git-fixes). - bonding: wait for sysfs kobject destruction before freeing struct slave (git-fixes). - BTRFS: Cleanup try_flush_qgroup (bsc#1182047). - BTRFS: correctly calculate item size used when item key collision happens (bsc#1181996). - BTRFS: correctly validate compression type (bsc#1182269). - BTRFS: delete the ordered isize update code (bsc#1181998). - BTRFS: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#1182047). - BTRFS: do not set path->leave_spinning for truncate (bsc#1181998). - BTRFS: factor out extent dropping code from hole punch handler (bsc#1182038). - BTRFS: fix cloning range with a hole when using the NO_HOLES feature (bsc#1182038). - BTRFS: fix data bytes_may_use underflow with fallocate due to failed quota reserve (bsc#1182130) - BTRFS: fix ENOSPC errors, leading to transaction aborts, when cloning extents (bsc#1182038). - BTRFS: fix hole extent items with a zero size after range cloning (bsc#1182038). - BTRFS: fix lost i_size update after cloning inline extent (bsc#1181998). - BTRFS: fix mount failure caused by race with umount (bsc#1182248). - BTRFS: Fix race between extent freeing/allocation when using bitmaps (bsc#1181574). - BTRFS: fix unexpected cow in run_delalloc_nocow (bsc#1181987). - BTRFS: fix unexpected failure of nocow buffered writes after snapshotting when low on space (bsc#1181987). - BTRFS: Free correct amount of space in btrfs_delayed_inode_reserve_metadata (bsc#1182047). - BTRFS: incremental send, fix file corruption when no-holes feature is enabled (bsc#1182184). - BTRFS: Introduce extent_io_tree::owner to distinguish different io_trees (bsc#1181998). - BTRFS: introduce per-inode file extent tree (bsc#1181998). - BTRFS: prepare for extensions in compression options (bsc#1182269). - BTRFS: prop: fix vanished compression property after failed set (bsc#1182269). - BTRFS: prop: fix zstd compression parameter validation (bsc#1182269). - BTRFS: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#1182047). - BTRFS: replace all uses of btrfs_ordered_update_i_size (bsc#1181998). - BTRFS: send, allow clone operations within the same file (bsc#1182173) - BTRFS: send, do not issue unnecessary truncate operations (bsc#1182173) - BTRFS: send, fix emission of invalid clone operations within the same file (bsc#1182173) - BTRFS: send, fix incorrect file layout after hole punching beyond eof (bsc#1182173). - BTRFS: send: fix invalid clone operations when cloning from the same file and root (bsc#1182173) - BTRFS: send, fix missing truncate for inode with prealloc extent past eof (bsc#1182173). - BTRFS: send, orphanize first all conflicting inodes when processing references (bsc#1182243 bsc#1182242). - BTRFS: send, recompute reference path after orphanization of a directory (bsc#1182243). - BTRFS: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#1182047). - BTRFS: transaction: Avoid deadlock due to bad initialization timing of fs_info::journal_info (bsc#1181931). - BTRFS: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047). - BTRFS: Use bd_dev to generate index when dev_state_hashtable add items (bsc#1181931). - BTRFS: use btrfs_ordered_update_i_size in clone_finish_inode_update (bsc#1181998). - BTRFS: use the file extent tree infrastructure (bsc#1181998). - cifs: report error instead of invalid when revalidating a dentry fails (bsc#1177440). - dm: avoid filesystem lookup in dm_get_dev_t() (bsc#1178049). - Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (git-fixes). - Exclude Symbols.list again. Removing the exclude builds vanilla/linux-next builds. Fixes: 55877625c800 ('kernel-binary.spec.in: Package the obj_install_dir as explicit filelist.') - ext4: do not remount read-only with errors=continue on reboot (bsc#1182464). - ext4: fix a memory leak of ext4_free_data (bsc#1182447). - ext4: fix bug for rename with RENAME_WHITEOUT (bsc#1182449). - ext4: fix deadlock with fs freezing and EA inodes (bsc#1182463). - ext4: fix superblock checksum failure when setting password salt (bsc#1182465). - fgraph: Initialize tracing_graph_pause at task creation (git-fixes). - firmware: imx: select SOC_BUS to fix firmware build (git-fixes). - Fix unsynchronized access to sev members through svm_register_enc_region (bsc#1114648). - fs: fix lazytime expiration handling in __writeback_single_inode() (bsc#1182466). - fs: move I_DIRTY_INODE to fs.h (bsc#1182612). - HID: core: detect and skip invalid inputs to snto32() (git-fixes). - HID: wacom: Ignore attempts to overwrite the touch_max value from HID (git-fixes). - hwrng: timeriomem - Fix cooldown period calculation (git-fixes). - ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#190997). - ibmvnic: device remove has higher precedence over reset (bsc#1065729). - ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293). - ibmvnic: fix login buffer memory leak (bsc#1081134 ltc#164631). - ibmvnic: serialize access to work queue on remove (bsc#1065729). - ibmvnic: Set to CLOSED state even on error (bsc#1084610 ltc#165122 git-fixes). - Input: elo - fix an error code in elo_connect() (git-fixes). - Input: joydev - prevent potential read overflow in ioctl (git-fixes). - iwlwifi: exclude GEO SAR support for 3168 (git-fixes). - kABI: Fix kABI for 12856e7acde4 PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY (bsc#1179612). - kernel-binary.spec: Add back initrd and image symlink ghosts to filelist (bsc#1182140). Fixes: 76a9256314c3 ('rpm/kernel-{source,binary}.spec: do not include ghost symlinks (boo#1179082).') - kernfs: deal with kernfs_fill_super() failures (bsc#1181809). - KVM: apic: Flush TLB after APIC mode/address change if VPIDs are in use (bsc#1182302). - KVM: Fix kABI for set_virtual_apic_mode (bsc#1182310). - KVM: Fix kABI for tlb_flush (bsc#1182195). - kvm-vmx-Basic-APIC-virtualization-controls-have-thre.patch: (bsc#1182310). - KVM: VMX: check for existence of secondary exec controls before accessing (bsc#1182438). - KVM: VMX: hide flexpriority from guest when disabled at the module level (bsc#1182448). - kvm-vmx-Introduce-lapic_mode-enumeration.patch: (bsc#1182307). - KVM: x86: emulate RDPID (bsc#1182182). - KVM: x86: emulating RDPID failure shall return #UD rather than - KVM: X86: introduce invalidate_gpa argument to tlb flush (bsc#1182195). - libfs: fix error cast of negative value in simple_attr_write() (bsc#1179709). - libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#1170442). - mac80211: fix potential overflow when multiplying to u32 integers (git-fixes). - media: cx25821: Fix a bug when reallocating some dma memory (git-fixes). - media: media/pci: Fix memleak in empress_init (git-fixes). - media: pwc: Use correct device for DMA (git-fixes). - media: px
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel-default SUSE:Linux Enterprise High Availability Extension 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 4.12.14-122.63.1
Mettez à jour vers 4.12.14-122.63.1
kernel-default SUSE:Linux Enterprise Live Patching 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 4.12.14-122.63.1
Mettez à jour vers 4.12.14-122.63.1
kgraft-patch-sle12-sp5_update_16 SUSE:Linux Enterprise Live Patching 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 1-8.3.1
Mettez à jour vers 1-8.3.1
kernel-docs SUSE:Linux Enterprise Software Development Kit 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 4.12.14-122.63.1
Mettez à jour vers 4.12.14-122.63.1
kernel-obs-build SUSE:Linux Enterprise Software Development Kit 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 4.12.14-122.63.1
Mettez à jour vers 4.12.14-122.63.1
kernel-default SUSE:Linux Enterprise Server 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 4.12.14-122.63.1
Mettez à jour vers 4.12.14-122.63.1
kernel-source SUSE:Linux Enterprise Server 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 4.12.14-122.63.1
Mettez à jour vers 4.12.14-122.63.1
kernel-syms SUSE:Linux Enterprise Server 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 4.12.14-122.63.1
Mettez à jour vers 4.12.14-122.63.1
kernel-default SUSE:Linux Enterprise Server for SAP Applications 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 4.12.14-122.63.1
Mettez à jour vers 4.12.14-122.63.1
kernel-source SUSE:Linux Enterprise Server for SAP Applications 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 4.12.14-122.63.1
Mettez à jour vers 4.12.14-122.63.1
kernel-syms SUSE:Linux Enterprise Server for SAP Applications 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 4.12.14-122.63.1
Mettez à jour vers 4.12.14-122.63.1
kernel-default SUSE:Linux Enterprise Workstation Extension 12 SP5
- Plages de versions concernées
- ECOSYSTEM: < 4.12.14-122.63.1
Mettez à jour vers 4.12.14-122.63.1
Sources originales
- https://www.suse.com/support/update/announcement/2021/suse-su-20210742-1/
- https://bugzilla.suse.com/1065600
- https://bugzilla.suse.com/1065729
- https://bugzilla.suse.com/1078720
- https://bugzilla.suse.com/1081134
- https://bugzilla.suse.com/1084610
- https://bugzilla.suse.com/1114648
- https://bugzilla.suse.com/1163617
- https://bugzilla.suse.com/1163930
- https://bugzilla.suse.com/1169514
- https://bugzilla.suse.com/1170442
- https://bugzilla.suse.com/1176855
- https://bugzilla.suse.com/1177440
- https://bugzilla.suse.com/1178049
- https://bugzilla.suse.com/1179082
- https://bugzilla.suse.com/1179142
- https://bugzilla.suse.com/1179612
- https://bugzilla.suse.com/1179709
- https://bugzilla.suse.com/1180058
- https://bugzilla.suse.com/1181346
- https://bugzilla.suse.com/1181504
- https://bugzilla.suse.com/1181574
- https://bugzilla.suse.com/1181671
- https://osv.dev/vulnerability/SUSE-SU-2021:0742-1