openSUSE 15.3: 2022:0363-1 Critical Update: Linux Kernel Security Patch
opensuse
February 10, 2022
An update that solves 12 vulnerabilities and has 20 fixes is now available
Description
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive
various security and bugfixes.
The following security bugs were fixed:
- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that
validate domain record count on input (bsc#1195254).
- CVE-2022-0330: Fixed flush TLBs before releasing backing store
(bsc#1194880).
- CVE-2022-0286: Fixed null pointer dereference in bond_ipsec_add_sa()
that may have lead to local denial of service (bnc#1195371).
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy
(bsc#1195065).
- CVE-2021-45095: Fixed refcount leak in pep_sock_accept in
net/phonet/pep.c (bnc#1193867).
- CVE-2021-44733: Fixed a use-after-free exists in drivers/tee/tee_shm.c
in the TEE subsystem, that could have occured because of a race
condition in tee_shm_get_from_id during an attempt to free a shared
memory object (bnc#1193767).
- CVE-2021-39657: Fixed out of bounds read...
Read the Full Advisory
Patch
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.3:
zypper in -t patch openSUSE-SLE-15.3-2022-363=1
Package List
- openSUSE Leap 15.3 (noarch):
kernel-devel-azure-5.3.18-150300.38.40.4
kernel-source-azure-5.3.18-150300.38.40.4
- openSUSE Leap 15.3 (x86_64):
cluster-md-kmp-azure-5.3.18-150300.38.40.4
cluster-md-kmp-azure-debuginfo-5.3.18-150300.38.40.4
dlm-kmp-azure-5.3.18-150300.38.40.4
dlm-kmp-azure-debuginfo-5.3.18-150300.38.40.4
gfs2-kmp-azure-5.3.18-150300.38.40.4
gfs2-kmp-azure-debuginfo-5.3.18-150300.38.40.4
kernel-azure-5.3.18-150300.38.40.4
kernel-azure-debuginfo-5.3.18-150300.38.40.4
kernel-azure-debugsource-5.3.18-150300.38.40.4
kernel-azure-devel-5.3.18-150300.38.40.4
kernel-azure-devel-debuginfo-5.3.18-150300.38.40.4
kernel-azure-extra-5.3.18-150300.38.40.4
kernel-azure-extra-debuginfo-5.3.18-150300.38.40.4
kernel-azure-livepatch-devel-5.3.18-150300.38.40.4
kernel-azure-optional-5.3.18-150300.38.40.4
kernel-azure-optional-debuginfo-5.3.18-150300.38.40.4
kernel-syms-azure-5.3.18-150300.38.40.1
kselftests-kmp-azure-5.3.18-150300.38.40.4
kselftests-kmp-azure-debuginfo-5.3.18-150300.38.40.4
ocfs2-kmp-azure-5.3....
Read the Full AdvisoryReferences
https://www.suse.com/security/cve/CVE-2020-28097.html
https://www.suse.com/security/cve/CVE-2021-22600.html
https://www.suse.com/security/cve/CVE-2021-39648.html
https://www.suse.com/security/cve/CVE-2021-39657.html
https://www.suse.com/security/cve/CVE-2021-39685.html
https://www.suse.com/security/cve/CVE-2021-4159.html
https://www.suse.com/security/cve/CVE-2021-44733.html
https://www.suse.com/security/cve/CVE-2021-45095.html
https://www.suse.com/security/cve/CVE-2022-0286.html
https://www.suse.com/security/cve/CVE-2022-0330.html
https://www.suse.com/security/cve/CVE-2022-0435.html
https://www.suse.com/security/cve/CVE-2022-22942.html
https://bugzilla.suse.com/1154353
https://bugzilla.suse.com/1154488
https://bugzilla.suse.com/1160634
https://bugzilla.suse.com/1176447
https://bugzilla.suse.com/1177599
https://bugzilla.suse.com/1183405
https://bugzilla.suse.com/1185377
https://bugzilla.suse.com/1187428
https://bugzilla.suse.com/1187723
https://bugzilla.suse.com/1188605
https://bugzilla.suse.com/1191881
https...
Read the Full Advisory
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2022:0363-1
Rating: critical
Affected Products:
openSUSE Leap 15.3
ble.
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!