The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nfdupnetdev.c, related to nftablesoffload (bsc#1196299).
CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830).
CVE-2022-0487: A use-after-free vulnerability was found in rtsxusbmsdrvremove() in drivers/memstick/host/rtsxusbms.c (bsc#1194516).
CVE-2022-24448: Fixed an issue if an application sets the ODIRECTORY flag, and tries to open a regular file, nfsatomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).
CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udffilewrite_iter() via a malicious UDF image. (bsc#1196079)
CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernelreadfilefromfd(). (bsc#1196155)
CVE-2022-25258: The USB Gadget subsystem lacked certain validation of interface OS descriptor requests, which could have lead to memory corruption (bsc#1196096).
CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).
CVE-2021-44879: In gcdatasegment() in fs/f2fs/gc.c, special files were not considered, which lead to a movedatapage NULL pointer dereference (bsc#1195987).
CVE-2021-0920: Fixed a local privilege escalation due to a use-after-free vulnerability in unixscmtoskb of afunix (bsc#1193731).
CVE-2021-39657: Fixed an information leak in the Universal Flash Storage subsystem (bsc#1193864).
The following non-security bugs were fixed:
ALSA: intel_hdmi: Fix reference to PCM buffer address (git-fixes).
ARM: 9182/1: mmu: fix returns from earlyparam() and _setup() functions (git-fixes).
ARM: Fix kgdb breakpoint for Thumb2 (git-fixes).
ASoC: cs4265: Fix the duplicated control name (git-fixes).
ASoC: ops: Shift tested values in sndsocput_volsw() by +min (git-fixes).
ASoC: rt5668: do not block workqueue if card is unbound (git-fixes).
ASoC: rt5682: do not block workqueue if card is unbound (git-fixes).
Bluetooth: btusb: Add missing Chicony device for Realtek RTL8723BE (bsc#1196779).
EDAC/altera: Fix deferred probing (bsc#1178134).
HID: add mapping for KEYALLAPPLICATIONS (git-fixes).
HID: add mapping for KEY_DICTATE (git-fixes).
Hand over the maintainership to SLE15-SP3 maintainers
IB/hfi1: Correct guard on eager buffer deallocation (git-fixes).
IB/hfi1: Fix early init panic (git-fixes).
IB/hfi1: Fix leak of rcvhdrtaildummykvaddr (git-fixes).
IB/hfi1: Insure use of smpprocessorid() is preempt disabled (git-fixes).
IB/rdmavt: Validate remote_addr during loopback atomic tests (git-fixes).
Input: clear BTN_RIGHT/MIDDLE on buttonpads (git-fixes).