SUSE-SU-2024:3467-1
SUSE-SU-2024:3467-1 · Security update for the Linux Kernel
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002) - CVE-2022-48919: Fix double free race when mount fails in cifs_get_root() (bsc#1229657). - CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454). - CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707). - CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503) - CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959) The following non-security bugs were fixed: - fuse: fix SetPageUptodate() condition in STORE (bsc#1229456). - reiserfs: fix 'new_insert_key may be used uninitialized ...' (bsc#1228938). - scsi: pm80xx: Fix TMF task completion race condition (bsc#1228002)
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel-default SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
- Plages de versions concernées
- ECOSYSTEM: < 3.0.101-108.162.1
Mettez à jour vers 3.0.101-108.162.1
kernel-ec2 SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
- Plages de versions concernées
- ECOSYSTEM: < 3.0.101-108.162.1
Mettez à jour vers 3.0.101-108.162.1
kernel-source SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
- Plages de versions concernées
- ECOSYSTEM: < 3.0.101-108.162.1
Mettez à jour vers 3.0.101-108.162.1
kernel-syms SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
- Plages de versions concernées
- ECOSYSTEM: < 3.0.101-108.162.1
Mettez à jour vers 3.0.101-108.162.1
kernel-trace SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
- Plages de versions concernées
- ECOSYSTEM: < 3.0.101-108.162.1
Mettez à jour vers 3.0.101-108.162.1
kernel-xen SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
- Plages de versions concernées
- ECOSYSTEM: < 3.0.101-108.162.1
Mettez à jour vers 3.0.101-108.162.1
Sources originales
- https://www.suse.com/support/update/announcement/2024/suse-su-20243467-1/
- https://bugzilla.suse.com/1202346
- https://bugzilla.suse.com/1227985
- https://bugzilla.suse.com/1228002
- https://bugzilla.suse.com/1228938
- https://bugzilla.suse.com/1228959
- https://bugzilla.suse.com/1229454
- https://bugzilla.suse.com/1229456
- https://bugzilla.suse.com/1229503
- https://bugzilla.suse.com/1229657
- https://bugzilla.suse.com/1229707
- https://www.suse.com/security/cve/CVE-2022-20368
- https://www.suse.com/security/cve/CVE-2022-48791
- https://www.suse.com/security/cve/CVE-2022-48839
- https://www.suse.com/security/cve/CVE-2022-48919
- https://www.suse.com/security/cve/CVE-2024-42232
- https://www.suse.com/security/cve/CVE-2024-43882
- https://www.suse.com/security/cve/CVE-2024-43883
- https://www.suse.com/security/cve/CVE-2024-44947
- https://osv.dev/vulnerability/SUSE-SU-2024:3467-1