p PatchFirst

SUSE-SU-2022:3844-1

SUSE-SU-2022:3844-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 15 SP4 kernel was updated. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960). - CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552). - CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bnc#1203987). - CVE-2022-41849: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open (bnc#1203992). - CVE-2022-41674: Fixed a DoS issue where kernel can crash on the reception of specific WiFi Frames (bsc#1203770). - CVE-2022-1263: Fixed a NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allowed an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service (bnc#1198189). - CVE-2022-32296: Fixed a bug which allowed TCP servers to identify clients by observing what source ports are used (bnc#1200288). - CVE-2022-3202: Fixed a NULL pointer dereference flaw in Journaled File System. This could allow a local attacker to crash the system or leak kernel internal information (bnc#1203389). - CVE-2022-39189: Fixed a bug in the x86 KVM subsystem which allows unprivileged guest users to compromise the guest kernel because TLB flush operations are mishandled (bnc#1203066). - CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bnc#1202095). - CVE-2022-42722: Fixed crash in beacon protection for P2P-device. (bsc#1204125) - CVE-2022-42719: Fixed MBSSID parsing use-after-free. (bsc#1204051) - CVE-2022-42721: Avoid nontransmitted BSS list corruption. (bsc#1204060) - CVE-2022-42720: Fixed BSS refcounting bugs. (bsc#1204059) The following non-security bugs were fixed: - ACPI / scan: Create platform device for CS35L41 (bsc#1203699). - ACPI: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems (bsc#1203767). - ACPI: resource: skip IRQ override on AMD Zen platforms (git-fixes). - ACPI: scan: Add CLSA0101 Laptop Support (bsc#1203699). - ACPI: utils: Add api to read _SUB from ACPI (bsc#1203699). - ALSA: aloop: Fix random zeros in capture data when using jiffies timer (git-fixes). - ALSA: core: Fix double-free at snd_card_new() (git-fixes). - ALSA: cs35l41: Check hw_config before using it (bsc#1203699). - ALSA: cs35l41: Enable Internal Boost in shared lib (bsc#1203699). - ALSA: cs35l41: Move cs35l41_gpio_config to shared lib (bsc#1203699). - ALSA: cs35l41: Unify hardware configuration (bsc#1203699). - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (git-fixes). - ALSA: hda: add Intel 5 Series / 3400 PCI DID (git-fixes). - ALSA: hda: cs35l41: Add Amp Name based on channel and index (bsc#1203699). - ALSA: hda: cs35l41: Add Boost type flag (bsc#1203699). - ALSA: hda: cs35l41: Add calls to newly added test key function (bsc#1203699). - ALSA: hda: cs35l41: Add defaulted values into dsp bypass config sequence (bsc#1203699). - ALSA: hda: cs35l41: Add initial DSP support and firmware loading (bsc#1203699). - ALSA: hda: cs35l41: Add missing default cases (bsc#1203699). - ALSA: hda: cs35l41: Add module parameter to control firmware load (bsc#1203699). - ALSA: hda: cs35l41: Add support for CS35L41 in HDA systems (bsc#1203699). - ALSA: hda: cs35l41: Add Support for Interrupts (bsc#1203699). - ALSA: hda: cs35l41: Allow compilation test on non-ACPI configurations (bsc#1203699). - ALSA: hda: cs35l41: Always configure the DAI (bsc#1203699). - ALSA: hda: cs35l41: Avoid overwriting register patch (bsc#1203699). - ALSA: hda: cs35l41: Clarify support for CSC3551 without _DSD Properties (bsc#1203699). - ALSA: hda: cs35l41: Consolidate selections under SND_HDA_SCODEC_CS35L41 (bsc#1203699). - ALSA: hda: cs35l41: Do not dereference fwnode handle (bsc#1203699). - ALSA: hda: cs35l41: Drop wrong use of ACPI_PTR() (bsc#1203699). - ALSA: hda: cs35l41: Enable GPIO2 Interrupt for CLSA0100 laptops (bsc#1203699). - ALSA: hda: cs35l41: Fix comments wrt serial-multi-instantiate reference (bsc#1203699). - ALSA: hda: cs35l41: fix double free on error in probe() (bsc#1203699). - ALSA: hda: cs35l41: Fix error in spi cs35l41 hda driver name (bsc#1203699). - ALSA: hda: cs35l41: Fix I2S params comments (bsc#1203699). - ALSA: hda: cs35l41: Handle all external boost setups the same way (bsc#1203699). - ALSA: hda: cs35l41: Improve dev_err_probe() messaging (bsc#1203699). - ALSA: hda: cs35l41: Make cs35l41_hda_remove() return void (bsc#1203699). - ALSA: hda: cs35l41: Make use of the helper function dev_err_probe() (bsc#1203699). - ALSA: hda: cs35l41: Move boost config to initialization code (bsc#1203699). - ALSA: hda: cs35l41: Move cs35l41* calls to its own symbol namespace (bsc#1203699). - ALSA: hda: cs35l41: Move external boost handling to lib for ASoC use (bsc#1203699). - ALSA: hda: cs35l41: Mute the device before shutdown (bsc#1203699). - ALSA: hda: cs35l41: Put the device into safe mode for external boost (bsc#1203699). - ALSA: hda: cs35l41: Read Speaker Calibration data from UEFI variables (bsc#1203699). - ALSA: hda: cs35l41: Remove cs35l41_hda_reg_sequence struct (bsc#1203699). - ALSA: hda: cs35l41: Remove Set Channel Map api from binding (bsc#1203699). - ALSA: hda: cs35l41: Reorganize log for playback actions (bsc#1203699). - ALSA: hda: cs35l41: Save codec object inside component struct (bsc#1203699). - ALSA: hda: cs35l41: Save Subsystem ID inside CS35L41 Driver (bsc#1203699). - ALSA: hda: cs35l41: Set Speaker Position for CLSA0100 Laptop (bsc#1203699). - ALSA: hda: cs35l41: Support CLSA0101 (bsc#1203699). - ALSA: hda: cs35l41: Support Firmware switching and reloading (bsc#1203699). - ALSA: hda: cs35l41: Support Hibernation during Suspend (bsc#1203699). - ALSA: hda: cs35l41: Support multiple load paths for firmware (bsc#1203699). - ALSA: hda: cs35l41: Support reading subsystem id from ACPI (bsc#1203699). - ALSA: hda: cs35l41: Support Speaker ID for laptops (bsc#1203699). - ALSA: hda: cs35l41: Tidyup code (bsc#1203699). - ALSA: hda: cs35l41: Use the CS35L41 HDA internal define (bsc#1203699). - ALSA: hda: Fix dependencies of CS35L41 on SPI/I2C buses (bsc#1203699). - ALSA: hda: Fix dependency on ASoC cs35l41 codec (bsc#1203699). - ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation (git-fixes). - ALSA: hda: Fix Nvidia dp infoframe (git-fixes). - ALSA: hda: hda_cs_dsp_ctl: Add apis to write the controls directly (bsc#1203699). - ALSA: hda: hda_cs_dsp_ctl: Add fw id strings (bsc#1203699). - ALSA: hda: hda_cs_dsp_ctl: Add Library to support CS_DSP ALSA controls (bsc#1203699). - ALSA: hda: intel-dsp-config: Add RaptorLake PCI IDs (jsc#PED-720). - ALSA: hda/cs8409: Add new Dolphin HW variants (bsc#1203699). - ALSA: hda/cs8409: Add Speaker Playback Switch for Cyborg (bsc#1203699). - ALSA: hda/cs8409: Add Speaker Playback Switch for Warlock (bsc#1203699). - ALSA: hda/cs8409: change cs8409_fixups v.pins initializers to static (bsc#1203699). - ALSA: hda/cs8409: Disable HSBIAS_SENSE_EN for Cyborg (bsc#1203699). - ALSA: hda/cs8409: Fix Full Scale Volume setting for all variants (bsc#1203699). - ALSA: hda/cs8409: Fix Warlock to use mono mic configuration (bsc#1203699). - ALSA: hda/cs8409: Re-order quirk table into ascending order (bsc#1203699). - ALSA: hda/cs8409: Support manual mode detection for CS42L42 (bsc#1203699). - ALSA: hda/cs8409: Support new Dolphin Variants (bsc#1203699). - ALSA: hda/cs8409: Support new Odin Variants (bsc#1203699). - ALSA: hda/cs8409: Support new Warlock MLK Variants (bsc#1203699). - ALSA: hda/cs8409: Use general cs42l42 include in cs8409 hda dr

Fix available

Published
Updated

Stack: system

Affected products and versions

  • kernel-default SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-default-base SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1.150400.24.9.5

    Update to 5.14.21-150400.24.28.1.150400.24.9.5

  • kernel-64kb SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-default-base SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1.150400.24.9.5

    Update to 5.14.21-150400.24.28.1.150400.24.9.5

  • kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-zfcpdump SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-default SUSE:Linux Enterprise Live Patching 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-livepatch-sle15-sp4_update_4 SUSE:Linux Enterprise Live Patching 15 SP4

    Affected ranges
    • ECOSYSTEM: < 1-150400.9.3.5

    Update to 1-150400.9.3.5

  • kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • dtb-aarch64 openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-64kb openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-debug openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-default openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-default-base openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1.150400.24.9.5

    Update to 5.14.21-150400.24.28.1.150400.24.9.5

  • kernel-docs openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-kvmsmall openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

  • kernel-obs-build openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.28.1

    Update to 5.14.21-150400.24.28.1

Original sources

Check your server →