openSUSE-SU-2022:0768-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0768-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2022:0768-1
- Related
- Published
- 2022-03-09T09:09:29Z
- Modified
- 2022-03-09T09:09:29Z
- Summary
- Security update for the Linux Kernel
- Details
-
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.
Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.
The following security bugs were fixed:
- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).
- CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udffilewrite_iter() via a malicious UDF image. (bsc#1196079)
- CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernelreadfilefromfd() (bsc#1196155).
- CVE-2021-44879: In gcdatasegment() in fs/f2fs/gc.c, special files were not considered, which lead to a movedatapage NULL pointer dereference (bsc#1195987).
- CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).
- CVE-2022-0487: A use-after-free vulnerability was found in rtsxusbmsdrvremove() in drivers/memstick/host/rtsxusbms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
- CVE-2022-24448: Fixed an issue in fs/nfs/dir.c. If an application sets the ODIRECTORY flag, and tries to open a regular file, nfsatomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).
The following non-security bugs were fixed:
- crypto: afalg - getpage upon reassignment to TX SGL (bsc#1195840).
- lib/ioviter: initialize 'flags' in new pipebuffer (bsc#1196584).
- References
-
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MWGLT5YBYSSX5MP2JBKT3N3QV2IWMC5F/
- https://bugzilla.suse.com/1185973
- https://bugzilla.suse.com/1191580
- https://bugzilla.suse.com/1194516
- https://bugzilla.suse.com/1195536
- https://bugzilla.suse.com/1195543
- https://bugzilla.suse.com/1195612
- https://bugzilla.suse.com/1195840
- https://bugzilla.suse.com/1195897
- https://bugzilla.suse.com/1195908
- https://bugzilla.suse.com/1195949
- https://bugzilla.suse.com/1195987
- https://bugzilla.suse.com/1196079
- https://bugzilla.suse.com/1196155
- https://bugzilla.suse.com/1196584
- https://bugzilla.suse.com/1196612
- https://www.suse.com/security/cve/CVE-2021-44879
- https://www.suse.com/security/cve/CVE-2022-0001
- https://www.suse.com/security/cve/CVE-2022-0002
- https://www.suse.com/security/cve/CVE-2022-0487
- https://www.suse.com/security/cve/CVE-2022-0492
- https://www.suse.com/security/cve/CVE-2022-0617
- https://www.suse.com/security/cve/CVE-2022-0644
- https://www.suse.com/security/cve/CVE-2022-0847
- https://www.suse.com/security/cve/CVE-2022-24448
- https://www.suse.com/security/cve/CVE-2022-24959
Affected packages
openSUSE:Leap 15.3 / kernel-debug
Package
- Name
- kernel-debug
- Purl
- purl:rpm/suse/kernel-debug&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-197.108.1
Ecosystem specific
{
"binaries": [
{
"kernel-default-man": "4.12.14-197.108.1",
"kernel-debug-base": "4.12.14-197.108.1",
"kernel-kvmsmall-base": "4.12.14-197.108.1",
"kernel-vanilla-livepatch-devel": "4.12.14-197.108.1",
"kernel-vanilla-devel": "4.12.14-197.108.1",
"kernel-zfcpdump-man": "4.12.14-197.108.1",
"kernel-vanilla-base": "4.12.14-197.108.1",
"kernel-vanilla": "4.12.14-197.108.1"
}
]
}
openSUSE:Leap 15.3 / kernel-default
Package
- Name
- kernel-default
- Purl
- purl:rpm/suse/kernel-default&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-197.108.1
Ecosystem specific
{
"binaries": [
{
"kernel-default-man": "4.12.14-197.108.1",
"kernel-debug-base": "4.12.14-197.108.1",
"kernel-kvmsmall-base": "4.12.14-197.108.1",
"kernel-vanilla-livepatch-devel": "4.12.14-197.108.1",
"kernel-vanilla-devel": "4.12.14-197.108.1",
"kernel-zfcpdump-man": "4.12.14-197.108.1",
"kernel-vanilla-base": "4.12.14-197.108.1",
"kernel-vanilla": "4.12.14-197.108.1"
}
]
}
openSUSE:Leap 15.3 / kernel-kvmsmall
Package
- Name
- kernel-kvmsmall
- Purl
- purl:rpm/suse/kernel-kvmsmall&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-197.108.1
Ecosystem specific
{
"binaries": [
{
"kernel-default-man": "4.12.14-197.108.1",
"kernel-debug-base": "4.12.14-197.108.1",
"kernel-kvmsmall-base": "4.12.14-197.108.1",
"kernel-vanilla-livepatch-devel": "4.12.14-197.108.1",
"kernel-vanilla-devel": "4.12.14-197.108.1",
"kernel-zfcpdump-man": "4.12.14-197.108.1",
"kernel-vanilla-base": "4.12.14-197.108.1",
"kernel-vanilla": "4.12.14-197.108.1"
}
]
}
openSUSE:Leap 15.3 / kernel-vanilla
Package
- Name
- kernel-vanilla
- Purl
- purl:rpm/suse/kernel-vanilla&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-197.108.1
Ecosystem specific
{
"binaries": [
{
"kernel-default-man": "4.12.14-197.108.1",
"kernel-debug-base": "4.12.14-197.108.1",
"kernel-kvmsmall-base": "4.12.14-197.108.1",
"kernel-vanilla-livepatch-devel": "4.12.14-197.108.1",
"kernel-vanilla-devel": "4.12.14-197.108.1",
"kernel-zfcpdump-man": "4.12.14-197.108.1",
"kernel-vanilla-base": "4.12.14-197.108.1",
"kernel-vanilla": "4.12.14-197.108.1"
}
]
}
openSUSE:Leap 15.3 / kernel-zfcpdump
Package
- Name
- kernel-zfcpdump
- Purl
- purl:rpm/suse/kernel-zfcpdump&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.12.14-197.108.1
Ecosystem specific
{
"binaries": [
{
"kernel-default-man": "4.12.14-197.108.1",
"kernel-debug-base": "4.12.14-197.108.1",
"kernel-kvmsmall-base": "4.12.14-197.108.1",
"kernel-vanilla-livepatch-devel": "4.12.14-197.108.1",
"kernel-vanilla-devel": "4.12.14-197.108.1",
"kernel-zfcpdump-man": "4.12.14-197.108.1",
"kernel-vanilla-base": "4.12.14-197.108.1",
"kernel-vanilla": "4.12.14-197.108.1"
}
]
}