SUSE-SU-2024:2493-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2024/suse-su-20242493-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:2493-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2024:2493-1
Related
Published
2024-07-16T01:38:11Z
Modified
2025-05-02T04:32:08.209354Z
Upstream
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47145: btrfs: do not BUGON in linktofixupdir (bsc#1222005).
  • CVE-2021-47201: iavf: free qvectors before queues in iavfdisable_vf (bsc#1222792).
  • CVE-2021-47275: bcache: avoid oversized read request in cache missing code path (bsc#1224965).
  • CVE-2021-47438: net/mlx5e: nullify cq->dbg pointer in mlx5debugcq_remove() (bsc#1225229)
  • CVE-2021-47498: dm rq: do not queue request to blk-mq during DM suspend (bsc#1225357).
  • CVE-2021-47520: can: pchcan: pchcanrxnormal: fix use after free (bsc#1225431).
  • CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
  • CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
  • CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci (bsc#1220833).
  • CVE-2023-52683: ACPI: LPIT: Avoid u32 multiplication overflow (bsc#1224627).
  • CVE-2023-52693: ACPI: video: check for error while searching for backlight device parent (bsc#1224686).
  • CVE-2023-52753: drm/amd/display: Avoid NULL dereference of timing generator (bsc#1225478).
  • CVE-2023-52817: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (bsc#1225569).
  • CVE-2023-52818: drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (bsc#1225530).
  • CVE-2023-52819: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (bsc#1225532).
  • CVE-2024-26635: llc: Drop support for ETHPTR8022 (bsc#1221656).
  • CVE-2024-26636: llc: make llcuisendmsg() more robust against bonding changes (bsc#1221659).
  • CVE-2024-26880: dm: call the resume method on internal suspend (bsc#1223188).
  • CVE-2024-35805: dm snapshot: fix lockup in dmexceptiontable_exit (bsc#1224743).
  • CVE-2024-35819: soc: fsl: qbman: Use raw spinlock for cgr_lock (bsc#1224683).
  • CVE-2024-35828: wifi: libertas: fix some memleaks in lbsallocatecmd_buffer() (bsc#1224622).
  • CVE-2024-35947: dyndbg: fix old BUG_ON in >control parser (bsc#1224647).
  • CVE-2024-36014: drm/arm/malidp: fix a possible null pointer dereference (bsc#1225593).
  • CVE-2024-36941: wifi: nl80211: do not free NULL coalescing rule (bsc#1225835).
  • CVE-2024-38598: md: fix resync softlockup when bitmap size is less than array size (bsc#1226757).
  • CVE-2024-38619: usb-storage: alauda: Check whether the media is initialized (bsc#1226861).
  • CVE-2024-39301: net/9p: fix uninit-value in p9clientrpc() (bsc#1226994).
  • CVE-2024-39475: fbdev: savage: Handle err return when savagefbcheckvar failed (bsc#1227435)

The following non-security bugs were fixed:

  • PM: hibernate: x86: Use crc32 instead of md5 for hibernation e820 integrity check (git-fixes).
  • SUNRPC: Fix gssfreeintokenpages() (git-fixes).
  • SUNRPC: Fix loop termination condition in gssfreeintokenpages() (git-fixes).
  • drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (git-fixes).
  • kgdb: Add kgdbhashit_break function (git-fixes).
  • kgdb: Move the extern declaration kgdbhashit_break() to generic kgdb.h (git-fixes).
  • net: hsr: fix placement of logical operator in a multi-line statement (bsc#1223021).
  • nfs: Handle error of rpcprocregister() in nfsnetinit() (git-fixes).
  • powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
  • sched/deadline: Fix BUG_ON condition for deboosted tasks (bsc#1227407).
  • sunrpc: fix NFSACL RPC retry on soft mount (git-fixes).
  • x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (git-fixes).
  • x86/boot/e820: Fix typo in e820.c comment (git-fixes).
  • x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (git-fixes).
  • x86/fpu: Return proper error codes from user access functions (git-fixes).
  • x86/ioremap: Fix page aligned size calculation in _ioremapcaller() (git-fixes).
  • x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes).
  • x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes).
  • x86/msr: Fix wr/rdmsrsaferegsoncpu() prototypes (git-fixes).
  • x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes).
  • x86: _memcpyflushcache: fix wrong alignment if size > 2^32 (git-fixes).
References

Affected packages

SUSE:Linux Enterprise Real Time 12 SP5 / kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-10.194.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-devel-rt": "4.12.14-10.194.1",
            "dlm-kmp-rt": "4.12.14-10.194.1",
            "gfs2-kmp-rt": "4.12.14-10.194.1",
            "kernel-rt_debug": "4.12.14-10.194.1",
            "kernel-rt-devel": "4.12.14-10.194.1",
            "cluster-md-kmp-rt": "4.12.14-10.194.1",
            "kernel-rt_debug-devel": "4.12.14-10.194.1",
            "kernel-source-rt": "4.12.14-10.194.1",
            "kernel-rt": "4.12.14-10.194.1",
            "ocfs2-kmp-rt": "4.12.14-10.194.1",
            "kernel-syms-rt": "4.12.14-10.194.1",
            "kernel-rt-base": "4.12.14-10.194.1"
        }
    ]
}

SUSE:Linux Enterprise Real Time 12 SP5 / kernel-rt_debug

Package

Name
kernel-rt_debug
Purl
pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-10.194.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-devel-rt": "4.12.14-10.194.1",
            "dlm-kmp-rt": "4.12.14-10.194.1",
            "gfs2-kmp-rt": "4.12.14-10.194.1",
            "kernel-rt_debug": "4.12.14-10.194.1",
            "kernel-rt-devel": "4.12.14-10.194.1",
            "cluster-md-kmp-rt": "4.12.14-10.194.1",
            "kernel-rt_debug-devel": "4.12.14-10.194.1",
            "kernel-source-rt": "4.12.14-10.194.1",
            "kernel-rt": "4.12.14-10.194.1",
            "ocfs2-kmp-rt": "4.12.14-10.194.1",
            "kernel-syms-rt": "4.12.14-10.194.1",
            "kernel-rt-base": "4.12.14-10.194.1"
        }
    ]
}

SUSE:Linux Enterprise Real Time 12 SP5 / kernel-source-rt

Package

Name
kernel-source-rt
Purl
pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-10.194.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-devel-rt": "4.12.14-10.194.1",
            "dlm-kmp-rt": "4.12.14-10.194.1",
            "gfs2-kmp-rt": "4.12.14-10.194.1",
            "kernel-rt_debug": "4.12.14-10.194.1",
            "kernel-rt-devel": "4.12.14-10.194.1",
            "cluster-md-kmp-rt": "4.12.14-10.194.1",
            "kernel-rt_debug-devel": "4.12.14-10.194.1",
            "kernel-source-rt": "4.12.14-10.194.1",
            "kernel-rt": "4.12.14-10.194.1",
            "ocfs2-kmp-rt": "4.12.14-10.194.1",
            "kernel-syms-rt": "4.12.14-10.194.1",
            "kernel-rt-base": "4.12.14-10.194.1"
        }
    ]
}

SUSE:Linux Enterprise Real Time 12 SP5 / kernel-syms-rt

Package

Name
kernel-syms-rt
Purl
pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-10.194.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-devel-rt": "4.12.14-10.194.1",
            "dlm-kmp-rt": "4.12.14-10.194.1",
            "gfs2-kmp-rt": "4.12.14-10.194.1",
            "kernel-rt_debug": "4.12.14-10.194.1",
            "kernel-rt-devel": "4.12.14-10.194.1",
            "cluster-md-kmp-rt": "4.12.14-10.194.1",
            "kernel-rt_debug-devel": "4.12.14-10.194.1",
            "kernel-source-rt": "4.12.14-10.194.1",
            "kernel-rt": "4.12.14-10.194.1",
            "ocfs2-kmp-rt": "4.12.14-10.194.1",
            "kernel-syms-rt": "4.12.14-10.194.1",
            "kernel-rt-base": "4.12.14-10.194.1"
        }
    ]
}