SUSE-SU-2022:0289-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0289-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2022:0289-1
- Related
- Published
- 2022-02-02T09:02:15Z
- Modified
- 2022-02-02T09:02:15Z
- Summary
- Security update for the Linux Kernel
- Details
-
The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2021-4083: Fixed race condition in Unix domain socket garbage collection that could lead to read memory after free (bsc#1193727).
- CVE-2021-4135: Fixed an information leak in the nsimbpfmap_alloc function (bsc#1193927).
- CVE-2021-4149: Fixed improper lock operation in btrfs that allowed users to crash the kernel or deadlock the system (bsc#1194001).
- CVE-2021-4197: Fixed a cgroup issue where lower privileged processes could write to fds of lower privileged ones that could lead to privilege escalation (bsc#1194302).
- CVE-2021-4202: Fixed race condition in nci_request() that could cause use-after-free (bsc#1194529).
- CVE-2021-44733: Fixed a use-after-free exists in drivers/tee/teeshm.c in the TEE subsystem in the Linux kernel that occured because of a race condition in teeshmgetfrom_id during an attempt to free a shared memory object (bnc#1193767).
- CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source addresses (bsc#1194094).
- CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c (bnc#1194087).
- CVE-2022-0185: Incorrect param length parsing in legacyparseparam which could have led to a local privilege escalation (bsc#1194517).
- CVE-2022-0322: Fixed a denial of service in SCTP sctpaddtochunk (bsc#1194985).
The following non-security bugs were fixed:
- ext4: Avoid trim error on fs with small groups (bsc#1191271).
- fget: clarify and improve _fgetfiles() implementation (bsc#1193727).
- kabi/severities: Add a kabi exception for drivers/tee/tee
- kprobes: Limit max data_size of the kretprobe instances (bsc#1193669).
- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- media: Revert 'media: uvcvideo: Set unique vdev name based in type' (bsc#1193255).
- moxart: fix potential use-after-free on remove path (bsc#1194516).
- powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic (bsc#1193901).
- powerpc: handle kdump appropriately with crashkexecpost_notifiers option (bsc#1193901).
- tpm: fix potential NULL pointer access in tpmdelchar_device (bsc#1184209, bsc#1193660).
- vfs: check fd has read access in kernelreadfilefromfd() (bsc#1194888).
- References
-
- https://www.suse.com/support/update/announcement/2022/suse-su-20220289-1/
- https://bugzilla.suse.com/1071995
- https://bugzilla.suse.com/1184209
- https://bugzilla.suse.com/1191271
- https://bugzilla.suse.com/1193255
- https://bugzilla.suse.com/1193660
- https://bugzilla.suse.com/1193669
- https://bugzilla.suse.com/1193727
- https://bugzilla.suse.com/1193767
- https://bugzilla.suse.com/1193901
- https://bugzilla.suse.com/1193927
- https://bugzilla.suse.com/1194001
- https://bugzilla.suse.com/1194087
- https://bugzilla.suse.com/1194094
- https://bugzilla.suse.com/1194302
- https://bugzilla.suse.com/1194516
- https://bugzilla.suse.com/1194517
- https://bugzilla.suse.com/1194529
- https://bugzilla.suse.com/1194888
- https://bugzilla.suse.com/1194985
- https://www.suse.com/security/cve/CVE-2021-4083
- https://www.suse.com/security/cve/CVE-2021-4135
- https://www.suse.com/security/cve/CVE-2021-4149
- https://www.suse.com/security/cve/CVE-2021-4197
- https://www.suse.com/security/cve/CVE-2021-4202
- https://www.suse.com/security/cve/CVE-2021-44733
- https://www.suse.com/security/cve/CVE-2021-45485
- https://www.suse.com/security/cve/CVE-2021-45486
- https://www.suse.com/security/cve/CVE-2022-0185
- https://www.suse.com/security/cve/CVE-2022-0322
Affected packages
SUSE:Real Time Module 15 SP2 / kernel-rt
Package
- Name
- kernel-rt
- Purl
- purl:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.3.18-68.1
Ecosystem specific
{
"binaries": [
{
"kernel-devel-rt": "5.3.18-68.1",
"dlm-kmp-rt": "5.3.18-68.1",
"kernel-rt_debug": "5.3.18-68.1",
"kernel-rt-devel": "5.3.18-68.1",
"cluster-md-kmp-rt": "5.3.18-68.1",
"kernel-rt_debug-devel": "5.3.18-68.1",
"kernel-source-rt": "5.3.18-68.1",
"kernel-rt": "5.3.18-68.1",
"ocfs2-kmp-rt": "5.3.18-68.1",
"gfs2-kmp-rt": "5.3.18-68.1",
"kernel-syms-rt": "5.3.18-68.1"
}
]
}
SUSE:Real Time Module 15 SP2 / kernel-rt_debug
Package
- Name
- kernel-rt_debug
- Purl
- purl:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.3.18-68.1
Ecosystem specific
{
"binaries": [
{
"kernel-devel-rt": "5.3.18-68.1",
"dlm-kmp-rt": "5.3.18-68.1",
"kernel-rt_debug": "5.3.18-68.1",
"kernel-rt-devel": "5.3.18-68.1",
"cluster-md-kmp-rt": "5.3.18-68.1",
"kernel-rt_debug-devel": "5.3.18-68.1",
"kernel-source-rt": "5.3.18-68.1",
"kernel-rt": "5.3.18-68.1",
"ocfs2-kmp-rt": "5.3.18-68.1",
"gfs2-kmp-rt": "5.3.18-68.1",
"kernel-syms-rt": "5.3.18-68.1"
}
]
}
SUSE:Real Time Module 15 SP2 / kernel-source-rt
Package
- Name
- kernel-source-rt
- Purl
- purl:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.3.18-68.1
Ecosystem specific
{
"binaries": [
{
"kernel-devel-rt": "5.3.18-68.1",
"dlm-kmp-rt": "5.3.18-68.1",
"kernel-rt_debug": "5.3.18-68.1",
"kernel-rt-devel": "5.3.18-68.1",
"cluster-md-kmp-rt": "5.3.18-68.1",
"kernel-rt_debug-devel": "5.3.18-68.1",
"kernel-source-rt": "5.3.18-68.1",
"kernel-rt": "5.3.18-68.1",
"ocfs2-kmp-rt": "5.3.18-68.1",
"gfs2-kmp-rt": "5.3.18-68.1",
"kernel-syms-rt": "5.3.18-68.1"
}
]
}
SUSE:Real Time Module 15 SP2 / kernel-syms-rt
Package
- Name
- kernel-syms-rt
- Purl
- purl:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.3.18-68.1
Ecosystem specific
{
"binaries": [
{
"kernel-devel-rt": "5.3.18-68.1",
"dlm-kmp-rt": "5.3.18-68.1",
"kernel-rt_debug": "5.3.18-68.1",
"kernel-rt-devel": "5.3.18-68.1",
"cluster-md-kmp-rt": "5.3.18-68.1",
"kernel-rt_debug-devel": "5.3.18-68.1",
"kernel-source-rt": "5.3.18-68.1",
"kernel-rt": "5.3.18-68.1",
"ocfs2-kmp-rt": "5.3.18-68.1",
"gfs2-kmp-rt": "5.3.18-68.1",
"kernel-syms-rt": "5.3.18-68.1"
}
]
}