SUSE-SU-2022:1196-1

SUSE-SU-2022:1196-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197227) - CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel. (bnc#1198033) - CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel. (bnc#1198031) - CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel. (bnc#1198032) - CVE-2022-0812: Fixed an incorrect header size calculations which could lead to a memory leak. (bsc#1196639) - CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock. (bsc#1197331) - CVE-2022-0850: Fixed a kernel information leak vulnerability in iov_iter.c. (bsc#1196761) - CVE-2022-26966: Fixed an issue in drivers/net/usb/sr9700.c, which allowed attackers to obtain sensitive information from the memory via crafted frame lengths from a USB device. (bsc#1196836) - CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-after-free if there is a corrupted quota file. (bnc#1197366) - CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free. (bnc#1196973) - CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040,CVE-2022-23041,CVE-2022-23042: Fixed multiple issues which could have lead to read/write access to memory pages or denial of service. These issues are related to the Xen PV device frontend drivers. (bsc#1196488) - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could crash the system or corrupt the system memory. (bsc#1196830) - CVE-2022-0001,CVE-2022-0002,CVE-2022-23960: Fixed a new kind of speculation issues, exploitable via JITed eBPF for instance. (bsc#1191580) - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197462) The following non-security bugs were fixed: - asix: Add rx->ax_skb = NULL after usbnet_skb_return() (git-fixes). - asix: Ensure asix_rx_fixup_info members are all reset (git-fixes). - asix: Fix small memory leak in ax88772_unbind() (git-fixes). - asix: fix uninit-value in asix_mdio_read() (git-fixes). - asix: fix wrong return value in asix_check_host_enable() (git-fixes). - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (bsc#1196018). - block: bfq: fix bfq_set_next_ioprio_data() (bsc#1191451). - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) (bsc#1194586). - can: dev: can_restart: fix use after free bug (git-fixes). - cgroup: Correct privileges check in release_agent writes (bsc#1196723). - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv (bsc#1196723). - cgroup: Use open-time cgroup namespace for process migration perm checks (bsc#1196723). - dax: update to new mmu_notifier semantic (bsc#1184207). - drm: add a locked version of drm_is_current_master (bsc#1197914). - drm: drm_file struct kABI compatibility workaround (bsc#1197914). - drm: protect drm_master pointers in drm_lease.c (bsc#1197914). - drm: serialize drm_file.master with a new spinlock (bsc#1197914). - drm: use the lookup lock in drm_is_current_master (bsc#1197914). - EDAC: Fix calculation of returned address and next offset in edac_align_ptr() (bsc#1114648). - ena_netdev: use generic power management (bsc#1197099 jsc#SLE-24125). - ena: Remove rcu_read_lock() around XDP program invocation (bsc#1197099 jsc#SLE-24125). - ethernet: amazon: ena: A typo fix in the file ena_com.h (bsc#1197099 jsc#SLE-24125). - ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1197754). - ext4: check for inconsistent extents between index and leaf block (bsc#1194163 bsc#1196339). - ext4: check for out-of-order index extents in ext4_valid_extent_entries() (bsc#1194163 bsc#1196339). - ext4: do not use the orphan list when migrating an inode (bsc#1197756). - ext4: fix an use-after-free issue about data=journal writeback mode (bsc#1195482). - ext4: Fix BUG_ON in ext4_bread when write quota data (bsc#1197755). - ext4: fix error handling in ext4_restore_inline_data() (bsc#1197757). - ext4: fix lazy initialization next schedule time computation in more granular unit (bsc#1194580). - ext4: make sure quota gets properly shutdown on error (bsc#1195480). - ext4: prevent partial update of the extent blocks (bsc#1194163 bsc#1196339). - ext4: update i_disksize if direct write past ondisk size (bsc#1197806). - genirq: Use rcu in kstat_irqs_usr() (bsc#1193738). - gtp: fix an use-before-init in gtp_newlink() (git-fixes). - IB/core: Fix ODP get user pages flow (git-fixes) - IB/hfi1: Acquire lock to release TID entries when user file is closed (git-fixes) - IB/hfi1: Adjust pkey entry in index 0 (git-fixes) - IB/hfi1: Correct guard on eager buffer deallocation (git-fixes) - IB/hfi1: Ensure pq is not left on waitlist (git-fixes) - IB/hfi1: Fix another case where pq is left on waitlist (git-fixes) - IB/hfi1: Fix error return code in parse_platform_config() (git-fixes) - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (git-fixes) - IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() (git-fixes) - IB/hfi1: Insure use of smp_processor_id() is preempt disabled (git-fixes) - IB/hfi1: Use kzalloc() for mmu_rb_handler allocation (git-fixes) - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields (git-fixes) - IB/qib: Use struct_size() helper (git-fixes) - IB/sa: Resolv use-after-free in ib_nl_make_request() (git-fixes) - IB/umad: Return EIO in case of when device disassociated (git-fixes) - IB/umad: Return EPOLLERR in case of when device disassociated (git-fixes) - isofs: Fix out of bound access for corrupted isofs image (bsc#1194591). - llc: fix netdevice reference leaks in llc_ui_bind() (git-fixes). - macros.kernel-source: Fix conditional expansion. Fixes: bb95fef3cf19 ('rpm: Use bash for %() expansion (jsc#SLE-18234).') - mdio: fix mdio-thunder.c dependency build error (git-fixes). - mm: bdi: initialize bdi_min_ratio when bdi is unregistered (bsc#1197763). - mm: drop NULL return check of pte_offset_map_lock() (bsc#1184207). - mm/rmap: always do TTU_IGNORE_ACCESS (bsc#1184207). - mm/rmap: update to new mmu_notifier semantic v2 (bsc#1184207). - net: arc_emac: Fix memleak in arc_mdio_probe (git-fixes). - net: asix: add proper error handling of usb read errors (git-fixes). - net: asix: fix uninit value bugs (git-fixes). - net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (git-fixes). - net: dp83867: Fix OF_MDIO config check (git-fixes). - net: dsa: bcm_sf2: put device node before return (git-fixes). - net: ena: Add capabilities field with support for ENI stats capability (bsc#1197099 jsc#SLE-24125). - net: ena: Add debug prints for invalid req_id resets (bsc#1197099 jsc#SLE-24125). - net: ena: add device distinct log prefix to files (bsc#1197099 jsc#SLE-24125). - net: ena: add jiffies of last napi call to stats (bsc#1197099 jsc#SLE-24125). - net: ena: aggregate doorbell common operations into a function (bsc#1197099 jsc#SLE-24125). - net: ena: aggregate stats increase into a function (bsc#1197099 jsc#SLE-24125). - net: ena: Change ENI stats support check to use capabilities field (bsc#1197099 jsc#SLE-24125). - net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1197099 jsc#SLE-24125). - net: ena: Change the name of bad_csum variable (bsc#1197099 jsc#SLE-24125). - net: ena: Extract recurring driver reset code into a f

Fix available

Published

2022-04-14T06:56:48Z

Updated

2026-02-04T03:45:32.095244Z

Stack: system

Check your server →