SUSE-SU-2022:2103-1

SUSE-SU-2022:2103-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 15 kernel was updated. The following security bugs were fixed: - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) - CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) - CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) - CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) - CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) - CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266) - CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577) - CVE-2017-13695: Fixed a bug that caused a stack dump allowing local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table. (bnc#1055710) - CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507). - CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063). - CVE-2021-39711: In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1197219). - CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742). - CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c. (bnc#1191958) - CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call (bnc#1187055). - CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c. (bnc#1198516) - CVE-2021-20292: Fixed object validation prior to performing operations on the object in nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723). - CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bnc#1197343) - CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144) - CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device from user-space. (bsc#1200143) - CVE-2022-21499: Reinforce the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb. (bsc#1199426) - CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605) - CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505). - CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426). - CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012). - CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system (bnc#1191647). - CVE-2019-20811: Fixed issue in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, where a reference count is mishandled (bnc#1172456). The following non-security bugs were fixed: - btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (bsc#1199399). - btrfs: tree-checker: fix incorrect printk format (bsc#1200249). - lib: dimlib: fix help text typos (bsc#1198776). - lib: dimlib: make DIMLIB a hidden symbol (bsc#1198776). - linux/dim: Add completions count to dim_sample (bsc#1198776). - linux/dim: Fix -Wunused-const-variable warnings (bsc#1198776). - linux/dim: Fix overflow in dim calculation (bsc#1198776). - linux/dim: Implement RDMA adaptive moderation (DIM) (bsc#1198776). - linux/dim: Move implementation to .c files (bsc#1198776). - linux/dim: Move logic to dim.h (bsc#1198776). - linux/dim: Remove 'net' prefix from internal DIM members (bsc#1198776). - linux/dim: Rename externally exposed macros (bsc#1198776). - linux/dim: Rename externally used net_dim members (bsc#1198776). - linux/dim: Rename net_dim_sample() to net_dim_update_sample() (bsc#1198776). - net: ena: A typo fix in the file ena_com.h (bsc#1198776). - net: ena: Add capabilities field with support for ENI stats capability (bsc#1198776). - net: ena: add device distinct log prefix to files (bsc#1198776). - net: ena: Add first_interrupt field to napi struct (bsc#1198776). - net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (bsc#1198776). - net: ena: add jiffies of last napi call to stats (bsc#1198776). - net: ena: add missing ethtool TX timestamping indication (bsc#1198776). - net: ena: add reserved PCI device ID (bsc#1198776). - net: ena: add support for reporting of packet drops (bsc#1198776). - net: ena: add support for the rx offset feature (bsc#1198776). - net: ena: add support for traffic mirroring (bsc#1198776). - net: ena: add unmask interrupts statistics to ethtool (bsc#1198776). - net: ena: aggregate stats increase into a function (bsc#1198776). - net: ena: allow setting the hash function without changing the key (bsc#1198776). - net: ena: avoid memory access violation by validating req_id properly (bsc#1198776). - net: ena: avoid unnecessary admin command when RSS function set fails (bsc#1198776). - net: ena: avoid unnecessary rearming of interrupt vector when busy-polling (bsc#1198776). - net: ena: Capitalize all log strings and improve code readability (bsc#1198776). - net: ena: change default RSS hash function to Toeplitz (bsc#1198776). - net: ena: Change ENI stats support check to use capabilities field (bsc#1198776). - net: ena: Change license into format to SPDX in all files (bsc#1198776). - net: ena: Change log message to netif/dev function (bsc#1198776). - net: ena: change num_queues to num_io_queues for clarity and consistency (bsc#1198776). - net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1198776). - net: ena: Change RSS related macros and variables names (bsc#1198776). - net: ena: Change the name of bad_csum variable (bsc#1198776). - net: ena: changes to RSS hash key allocation (bsc#1198776). - net: ena: clean up indentation issue (bsc#1198776). - net: ena: cosmetic: change ena_com_stats_admin stats to u64 (bsc#1198776). - net: ena: cosmetic: code reorderings (bsc#1198776). - net: ena: cosmetic: extract code to ena_indirection_table_set() (bsc#1198776). - net: ena: cosmetic: fix line break issues (bsc#1198776). - net: ena: cosmetic: fix spacing issues (bsc#1198776). - net: ena: cosmetic: fix spelling and grammar mistakes in comments (bsc#1198776). - net: ena: cosmetic: minor code changes (bsc#1198776). - net: ena: cosmetic: remove unnecessary code (bsc#1198776). - net: ena: cosmetic: remove unnecessary spaces and tabs in ena_com.h macros (bsc#1198776). - net: ena: cosmetic: rename ena_update_tx/rx_rings_intr_moderation() (bsc#1198776). - net: ena: cosmetic: set queue sizes to u32 for consistency (bsc#1198776). - net: ena: do not wake up tx queue when down (bsc#1198776). - net: ena: drop superfluous prototype (b

Fix available

Published

2022-06-16T13:20:52Z

Updated

2026-02-04T04:22:24.497188Z

Stack: system

Check your server →