SUSE-SU-2024:1870-1

SUSE-SU-2024:1870-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394). - CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bsc#1184509). - CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060). - CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416). - CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418). - CVE-2021-46909: Fixed PCI interrupt mapping in ARM footbridge (bsc#1220442). - CVE-2021-46938: Fixed double free of blk_mq_tag_set in dev remove after table load fails (bsc#1220554). - CVE-2021-46939: Fixed possible hung in trace_clock_global() (bsc#1220580). - CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628). - CVE-2021-46950: Fixed possible data corruption in md/raid1 when ending a failed write request (bsc#1220662). - CVE-2021-46958: Fixed race between transaction aborts and fsyncs that could lead to use-after-free in btrfs (bsc#1220521). - CVE-2021-46960: Fixed wrong error code from smb2_get_enc_key() (bsc#1220528). - CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536). - CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538). - CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572). - CVE-2021-46981: Fixed NULL pointer in flush_workqueue (bsc#1220611). - CVE-2021-46988: Fixed possible crash in userfaultfd due to unreleased page (bsc#1220706). - CVE-2021-46990: Fixed crashes when toggling entry flush barrier in powerpc/64s (bsc#1220743). - CVE-2021-46998: Fixed a use after free bug in enic_hard_start_xmit() (bsc#1220625). - CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751). - CVE-2021-47015: Fixed RX consumer index logic in the error path in bnxt_en (bsc#1220794). - CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637). - CVE-2021-47034: Fixed resolved pte update for kernel memory on radix in powerpc/64s (bsc#1220687). - CVE-2021-47045: Fixed null pointer dereference in lpfc_prep_els_iocb() (bsc#1220640). - CVE-2021-47049: Fixed Use after free in __vmbus_open() (bsc#1220692). - CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768). - CVE-2021-47056: Fixed uninitialized lock in adf_vf2pf_shutdown() (bsc#1220769). - CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742). - CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (bsc#1220745). - CVE-2021-47063: Fixed possible use-after-free in panel_bridge_detach() (bsc#1220777). - CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739). - CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829). - CVE-2021-47071: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220846). - CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850). - CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985). - CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987). - CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960). - CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532). - CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541). - CVE-2021-47114: Fixed data corruption by fallocate in ocfs2 (bsc#1221548). - CVE-2021-47117: Fixed bug on in ext4_es_cache_extent() as ext4_split_extent_at() failed (bsc#1221575). - CVE-2021-47118: Fixed possible use-after-free when initializing `cad_pid` (bsc#1221605). - CVE-2021-47119: Fixed memory leak in ext4_fill_super() (bsc#1221608). - CVE-2021-47138: Fixed possible out-of-bound memory access in cxgb4 when clearing filters (bsc#1221934). - CVE-2021-47141: Fixed possible NULL pointer dereference when freeing irqs (bsc#1221949). - CVE-2021-47142: Fixed a use-after-free in drm/amdgpu (bsc#1221952). - CVE-2021-47143: Fixed possible corruption in net/smc after failed device_add() (bsc#1221988). - CVE-2021-47150: Fixed the potential memory leak in fec_enet_init() (bsc#1221973). - CVE-2021-47153: Fixed wrongly generated interrupt on bus reset in i2c/i801 (bsc#1221969). - CVE-2021-47165: Fixed shutdown crash when component not probed in drm/meson (bsc#1221965). - CVE-2021-47166: Fixed possible corruptionb in nfs_do_recoalesce() (bsc#1221998). - CVE-2021-47167: Fixed an Oopsable condition in __nfs_pageio_add_request() (bsc#1221991). - CVE-2021-47168: Fixed an incorrect limit in filelayout_decode_layout() (bsc#1222002). - CVE-2021-47169: Fixed possible NULL pointer dereference in serial/rp2 (bsc#1222000). - CVE-2021-47171: Fixed memory leak in smsc75xx_bind() (bsc#1221994). - CVE-2021-47173: Fixed memory leak in uss720_probe() (bsc#1221993). - CVE-2021-47177: Fixed sysfs leak in alloc_iommu() (bsc#1221997). - CVE-2021-47179: Fixed a NULL pointer dereference in pnfs_mark_matching_lsegs_return() (bsc#1222001). - CVE-2021-47180: Fixed memory leak in nci_allocate_device() (bsc#1221999). - CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource() (bsc#1222660). - CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664). - CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669). - CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706). - CVE-2021-47202: Fixed NULL pointer dereferences in of_thermal_ functions (bsc#1222878) - CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516). - CVE-2022-48619: Fixed a denial-of-service issue in drivers/input/input.c (bsc#1218220). - CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366). - CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657). - CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456). - CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514). - CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320). - CVE-2023-52469: Fixed use-after-free in kv_parse_power_table() (bsc#1220411). - CVE-2023-52470: Fixed null-ptr-deref in radeon_crtc_init() (bsc#122041). - CVE-2023-52474: Fixed bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests in hfi1 (bsc#1220445). - CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703). - CVE-2023-52477: Fixed USB Hub accesses to uninitialized BOS descriptors (bsc#1220790). - CVE-2023-52486: Fixed possible use-after-free in drm (bsc#1221277). - CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836). - CVE-2023-52515: Fixed possible use-after-free in RDMA/srp (bsc#1221048). - CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927). - CVE-2023-52528: Fixed uninit-value access in __smsc75xx_read_reg() (bsc#1220843). - CVE-2023-52575: Fixed SBPB enablement for spec_rstack_overflow=off (bsc#1220871). - CVE-2023-52583: Fixed deadlock or deadcode of misusing dget() inside ceph (bsc#1221058). - CVE-2023-52587: Fixed mcast list locking in IB/ipoib (bsc#1221082). - CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088). - CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044). - CVE-2023-52598: Fixed wrong se

Fix available

Published

2024-05-30T14:27:09Z

Updated

2026-02-04T03:36:26.384359Z

Stack: system

Check your server →