p PatchFirst

SUSE-SU-2022:2721-1

SUSE-SU-2022:2721-1 · Security update for the Linux Kernel

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

The SUSE Linux Enterprise 12 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36946: Fixed an incorrect packet trucation operation which could lead to denial of service (bnc#1201940). - CVE-2022-20166: Fixed several possible memory safety issues due to unsafe operations (bsc#1200598). - CVE-2020-15393: Fixed a memory leak in the usbtest driver which could lead to denial of service (bnc#1173514). - CVE-2020-36558: Fixed a race condition involving VT_RESIZEX which could lead to a NULL pointer dereference and general protection fault (bnc#1200910). - CVE-2020-36557: Fixed a race condition between the VT_DISALLOCATE ioctl and closing/opening of TTYs could lead to a use-after-free (bnc#1201429). - CVE-2021-33656: Fixed memory out of bounds write related to ioctl cmd PIO_FONT (bnc#1201636). - CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635). - CVE-2022-1462: Fixed an out-of-bounds read flaw in the TTY subsystem (bnc#1198829). - CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762). - CVE-2022-2318: Fixed a use-after-free vulnerability in the timer handler in Rose subsystem that allowed unprivileged attackers to crash the system (bsc#1201251). - CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free (bnc#1196973). The following non-security bugs were fixed: - kvm: emulate: Do not adjust size of fastop and setcc subroutines (bsc#1201930). - kvm: emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).

Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • kernel-default SUSE:Linux Enterprise Server 12 SP2-BCL

    Plages de versions concernées
    • ECOSYSTEM: < 4.4.121-92.181.1

    Mettez à jour vers 4.4.121-92.181.1

  • kernel-source SUSE:Linux Enterprise Server 12 SP2-BCL

    Plages de versions concernées
    • ECOSYSTEM: < 4.4.121-92.181.1

    Mettez à jour vers 4.4.121-92.181.1

  • kernel-syms SUSE:Linux Enterprise Server 12 SP2-BCL

    Plages de versions concernées
    • ECOSYSTEM: < 4.4.121-92.181.1

    Mettez à jour vers 4.4.121-92.181.1

Sources originales

Vérifiez votre serveur →