What Are You Looking For?

Sign Up

   SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________

Announcement ID:    SUSE-SU-2022:0365-1
Rating:             critical
References:         #1177599 #1183405 #1185377 #1188605 #1193096 
                    #1193506 #1193861 #1193864 #1193867 #1194048 
                    #1194227 #1194880 #1195009 #1195065 #1195184 
                    #1195254 
Cross-References:   CVE-2021-22600 CVE-2021-39648 CVE-2021-39657
                    CVE-2021-45095 CVE-2022-0330 CVE-2022-0435
                    CVE-2022-22942
CVSS scores:
                    CVE-2021-22600 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
                    CVE-2021-22600 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
                    CVE-2021-39648 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
                    CVE-2021-39657 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
                    CVE-2021-45095 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
                    CVE-2021-45095 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
                    CVE-2022-0435 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
                    CVE-2022-22942 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:
                    SUSE Enterprise Storage 7
                    SUSE Linux Enterprise High Availability 15-SP2
                    SUSE Linux Enterprise High Performance Computing 15-SP2
                    SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS
                    SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS
                    SUSE Linux Enterprise Micro 5.0
                    SUSE Linux Enterprise Module for Live Patching 15-SP2
                    SUSE Linux Enterprise Realtime Extension 15-SP2
                    SUSE Linux Enterprise Server 15-SP2
                    SUSE Linux Enterprise Server 15-SP2-BCL
                    SUSE Linux Enterprise Server 15-SP2-LTSS
                    SUSE Linux Enterprise Server for SAP 15-SP2
                    SUSE Linux Enterprise Server for SAP Applications 15-SP2
                    SUSE Linux Enterprise Storage 7
                    SUSE Manager Proxy 4.1
                    SUSE Manager Retail Branch Server 4.1
                    SUSE Manager Server 4.1
______________________________________________________________________________

   An update that solves 7 vulnerabilities and has 9 fixes is
   now available.

Description:


   The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated receive various
   security and bugfixes.

   The following security bugs were fixed:

   - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that
     validate domain record count on input (bsc#1195254).
   - CVE-2021-45095: Fixed refcount leak in pep_sock_accept in
     net/phonet/pep.c (bnc#1193867).
   - CVE-2022-22942: Fixed stale file descriptors on failed usercopy
     (bsc#1195065).
   - CVE-2021-22600: Fixed double free bug in packet_set_ring() in
     net/packet/af_packet.c that could have been exploited by a local user
     through crafted syscalls to escalate privileges or deny service
     (bnc#1195184).
   - CVE-2021-39657: Fixed out of bounds read due to a missing bounds check
     in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local
     information disclosure with System execution privileges needed
     (bnc#1193864).
   - CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a
     race condition in gadget_dev_desc_UDC_show of configfs.c. This could
     lead to local information disclosure with System execution privileges
     needed. User interaction is not needed for exploitation (bnc#1193861).
   - CVE-2022-0330: Fixed flush TLBs before releasing backing store
     (bsc#1194880).

   The following non-security bugs were fixed:

   - bpf: Verifer, adjust_scalar_min_max_vals to always call
     update_reg_bounds() (bsc#1194227).
   - btrfs: tree-checker: Add EXTENT_ITEM and METADATA_ITEM check
     (bsc#1195009).
   - btrfs: tree-checker: annotate all error branches as unlikely
     (bsc#1195009).
   - btrfs: tree-checker: check for BTRFS_BLOCK_FLAG_FULL_BACKREF being set
     improperly (bsc#1195009).
   - hv_netvsc: Set needed_headroom according to VF (bsc#1193506).
   - net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506).
   - net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506).
   - net: allow retransmitting a TCP packet if original is still in queue
     (bsc#1188605 bsc#1187428).
   - net: mana: Add RX fencing (bsc#1193506).
   - net: mana: Add XDP support (bsc#1193506).
   - net: sch_generic: aviod concurrent reset and enqueue op for lockless
     qdisc (bsc#1183405).
   - net: sched: add barrier to ensure correct ordering for lockless qdisc
     (bsc#1183405).
   - net: sched: avoid unnecessary seqcount operation for lockless qdisc
     (bsc#1183405).
   - net: sched: fix packet stuck problem for lockless qdisc (bsc#1183405).
   - net: sched: fix tx action reschedule issue with stopped queue
     (bsc#1183405).
   - net: sched: fix tx action rescheduling issue during deactivation
     (bsc#1183405).
   - net: sched: replaced invalid qdisc tree flush helper in qdisc_replace
     (bsc#1183405).
   - net_sched: avoid resetting active qdisc for multiple times (bsc#1183405).
   - net_sched: get rid of unnecessary dev_qdisc_reset() (bsc#1183405).
   - net_sched: use qdisc_reset() in qdisc_destroy() (bsc#1183405).
   - nvme: add 'iopolicy' module parameter (bsc#1177599 bsc#1193096).
   - xfrm: fix MTU regression (bsc#1185377, bsc#1194048).


Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Manager Server 4.1:

      zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-365=1

   - SUSE Manager Retail Branch Server 4.1:

      zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-365=1

   - SUSE Manager Proxy 4.1:

      zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-365=1

   - SUSE Linux Enterprise Server for SAP 15-SP2:

      zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-365=1

   - SUSE Linux Enterprise Server 15-SP2-LTSS:

      zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-365=1

   - SUSE Linux Enterprise Server 15-SP2-BCL:

      zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-365=1

   - SUSE Linux Enterprise Realtime Extension 15-SP2:

      zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-365=1

   - SUSE Linux Enterprise Module for Live Patching 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2022-365=1

   - SUSE Linux Enterprise Micro 5.0:

      zypper in -t patch SUSE-SUSE-MicroOS-5.0-2022-365=1

   - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS:

      zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-365=1

   - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS:

      zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-365=1

   - SUSE Linux Enterprise High Availability 15-SP2:

      zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2022-365=1

   - SUSE Enterprise Storage 7:

      zypper in -t patch SUSE-Storage-7-2022-365=1



Package List:

   - SUSE Manager Server 4.1 (ppc64le s390x x86_64):

      kernel-default-5.3.18-24.102.1
      kernel-default-base-5.3.18-24.102.1.9.48.1
      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1
      kernel-default-devel-5.3.18-24.102.1
      kernel-default-devel-debuginfo-5.3.18-24.102.1
      kernel-obs-build-5.3.18-24.102.1
      kernel-obs-build-debugsource-5.3.18-24.102.1
      kernel-syms-5.3.18-24.102.1
      reiserfs-kmp-default-5.3.18-24.102.1
      reiserfs-kmp-default-debuginfo-5.3.18-24.102.1

   - SUSE Manager Server 4.1 (x86_64):

      kernel-preempt-5.3.18-24.102.1
      kernel-preempt-debuginfo-5.3.18-24.102.1
      kernel-preempt-debugsource-5.3.18-24.102.1
      kernel-preempt-devel-5.3.18-24.102.1
      kernel-preempt-devel-debuginfo-5.3.18-24.102.1

   - SUSE Manager Server 4.1 (noarch):

      kernel-devel-5.3.18-24.102.1
      kernel-docs-5.3.18-24.102.1
      kernel-macros-5.3.18-24.102.1
      kernel-source-5.3.18-24.102.1

   - SUSE Manager Retail Branch Server 4.1 (x86_64):

      kernel-default-5.3.18-24.102.1
      kernel-default-base-5.3.18-24.102.1.9.48.1
      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1
      kernel-default-devel-5.3.18-24.102.1
      kernel-default-devel-debuginfo-5.3.18-24.102.1
      kernel-obs-build-5.3.18-24.102.1
      kernel-obs-build-debugsource-5.3.18-24.102.1
      kernel-preempt-5.3.18-24.102.1
      kernel-preempt-debuginfo-5.3.18-24.102.1
      kernel-preempt-debugsource-5.3.18-24.102.1
      kernel-preempt-devel-5.3.18-24.102.1
      kernel-preempt-devel-debuginfo-5.3.18-24.102.1
      kernel-syms-5.3.18-24.102.1
      reiserfs-kmp-default-5.3.18-24.102.1
      reiserfs-kmp-default-debuginfo-5.3.18-24.102.1

   - SUSE Manager Retail Branch Server 4.1 (noarch):

      kernel-devel-5.3.18-24.102.1
      kernel-docs-5.3.18-24.102.1
      kernel-macros-5.3.18-24.102.1
      kernel-source-5.3.18-24.102.1

   - SUSE Manager Proxy 4.1 (noarch):

      kernel-devel-5.3.18-24.102.1
      kernel-docs-5.3.18-24.102.1
      kernel-macros-5.3.18-24.102.1
      kernel-source-5.3.18-24.102.1

   - SUSE Manager Proxy 4.1 (x86_64):

      kernel-default-5.3.18-24.102.1
      kernel-default-base-5.3.18-24.102.1.9.48.1
      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1
      kernel-default-devel-5.3.18-24.102.1
      kernel-default-devel-debuginfo-5.3.18-24.102.1
      kernel-obs-build-5.3.18-24.102.1
      kernel-obs-build-debugsource-5.3.18-24.102.1
      kernel-preempt-5.3.18-24.102.1
      kernel-preempt-debuginfo-5.3.18-24.102.1
      kernel-preempt-debugsource-5.3.18-24.102.1
      kernel-preempt-devel-5.3.18-24.102.1
      kernel-preempt-devel-debuginfo-5.3.18-24.102.1
      kernel-syms-5.3.18-24.102.1
      reiserfs-kmp-default-5.3.18-24.102.1
      reiserfs-kmp-default-debuginfo-5.3.18-24.102.1

   - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64):

      kernel-default-5.3.18-24.102.1
      kernel-default-base-5.3.18-24.102.1.9.48.1
      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1
      kernel-default-devel-5.3.18-24.102.1
      kernel-default-devel-debuginfo-5.3.18-24.102.1
      kernel-obs-build-5.3.18-24.102.1
      kernel-obs-build-debugsource-5.3.18-24.102.1
      kernel-syms-5.3.18-24.102.1
      reiserfs-kmp-default-5.3.18-24.102.1
      reiserfs-kmp-default-debuginfo-5.3.18-24.102.1

   - SUSE Linux Enterprise Server for SAP 15-SP2 (x86_64):

      kernel-preempt-5.3.18-24.102.1
      kernel-preempt-debuginfo-5.3.18-24.102.1
      kernel-preempt-debugsource-5.3.18-24.102.1
      kernel-preempt-devel-5.3.18-24.102.1
      kernel-preempt-devel-debuginfo-5.3.18-24.102.1

   - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch):

      kernel-devel-5.3.18-24.102.1
      kernel-docs-5.3.18-24.102.1
      kernel-macros-5.3.18-24.102.1
      kernel-source-5.3.18-24.102.1

   - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64):

      kernel-default-5.3.18-24.102.1
      kernel-default-base-5.3.18-24.102.1.9.48.1
      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1
      kernel-default-devel-5.3.18-24.102.1
      kernel-default-devel-debuginfo-5.3.18-24.102.1
      kernel-obs-build-5.3.18-24.102.1
      kernel-obs-build-debugsource-5.3.18-24.102.1
      kernel-syms-5.3.18-24.102.1
      reiserfs-kmp-default-5.3.18-24.102.1
      reiserfs-kmp-default-debuginfo-5.3.18-24.102.1

   - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 x86_64):

      kernel-preempt-5.3.18-24.102.1
      kernel-preempt-debuginfo-5.3.18-24.102.1
      kernel-preempt-debugsource-5.3.18-24.102.1
      kernel-preempt-devel-5.3.18-24.102.1
      kernel-preempt-devel-debuginfo-5.3.18-24.102.1

   - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch):

      kernel-devel-5.3.18-24.102.1
      kernel-docs-5.3.18-24.102.1
      kernel-macros-5.3.18-24.102.1
      kernel-source-5.3.18-24.102.1

   - SUSE Linux Enterprise Server 15-SP2-BCL (noarch):

      kernel-devel-5.3.18-24.102.1
      kernel-docs-5.3.18-24.102.1
      kernel-macros-5.3.18-24.102.1
      kernel-source-5.3.18-24.102.1

   - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64):

      kernel-default-5.3.18-24.102.1
      kernel-default-base-5.3.18-24.102.1.9.48.1
      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1
      kernel-default-devel-5.3.18-24.102.1
      kernel-default-devel-debuginfo-5.3.18-24.102.1
      kernel-obs-build-5.3.18-24.102.1
      kernel-obs-build-debugsource-5.3.18-24.102.1
      kernel-preempt-5.3.18-24.102.1
      kernel-preempt-debuginfo-5.3.18-24.102.1
      kernel-preempt-debugsource-5.3.18-24.102.1
      kernel-preempt-devel-5.3.18-24.102.1
      kernel-preempt-devel-debuginfo-5.3.18-24.102.1
      kernel-syms-5.3.18-24.102.1

   - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64):

      kernel-default-5.3.18-24.102.1
      kernel-default-base-5.3.18-24.102.1.9.48.1
      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1
      kernel-default-devel-5.3.18-24.102.1
      kernel-default-devel-debuginfo-5.3.18-24.102.1
      kernel-obs-build-5.3.18-24.102.1
      kernel-obs-build-debugsource-5.3.18-24.102.1
      kernel-preempt-5.3.18-24.102.1
      kernel-preempt-debuginfo-5.3.18-24.102.1
      kernel-preempt-debugsource-5.3.18-24.102.1
      kernel-preempt-devel-5.3.18-24.102.1
      kernel-preempt-devel-debuginfo-5.3.18-24.102.1
      kernel-syms-5.3.18-24.102.1

   - SUSE Linux Enterprise Realtime Extension 15-SP2 (noarch):

      kernel-devel-5.3.18-24.102.1
      kernel-docs-5.3.18-24.102.1
      kernel-macros-5.3.18-24.102.1
      kernel-source-5.3.18-24.102.1

   - SUSE Linux Enterprise Module for Live Patching 15-SP2 (ppc64le s390x x86_64):

      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1
      kernel-default-livepatch-5.3.18-24.102.1
      kernel-default-livepatch-devel-5.3.18-24.102.1
      kernel-livepatch-5_3_18-24_102-default-1-5.3.1
      kernel-livepatch-5_3_18-24_102-default-debuginfo-1-5.3.1
      kernel-livepatch-SLE15-SP2_Update_24-debugsource-1-5.3.1

   - SUSE Linux Enterprise Micro 5.0 (aarch64 x86_64):

      kernel-default-5.3.18-24.102.1
      kernel-default-base-5.3.18-24.102.1.9.48.1
      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1

   - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64):

      kernel-default-5.3.18-24.102.1
      kernel-default-base-5.3.18-24.102.1.9.48.1
      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1
      kernel-default-devel-5.3.18-24.102.1
      kernel-default-devel-debuginfo-5.3.18-24.102.1
      kernel-obs-build-5.3.18-24.102.1
      kernel-obs-build-debugsource-5.3.18-24.102.1
      kernel-preempt-5.3.18-24.102.1
      kernel-preempt-debuginfo-5.3.18-24.102.1
      kernel-preempt-debugsource-5.3.18-24.102.1
      kernel-preempt-devel-5.3.18-24.102.1
      kernel-preempt-devel-debuginfo-5.3.18-24.102.1
      kernel-syms-5.3.18-24.102.1

   - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch):

      kernel-devel-5.3.18-24.102.1
      kernel-docs-5.3.18-24.102.1
      kernel-macros-5.3.18-24.102.1
      kernel-source-5.3.18-24.102.1

   - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64):

      kernel-default-5.3.18-24.102.1
      kernel-default-base-5.3.18-24.102.1.9.48.1
      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1
      kernel-default-devel-5.3.18-24.102.1
      kernel-default-devel-debuginfo-5.3.18-24.102.1
      kernel-obs-build-5.3.18-24.102.1
      kernel-obs-build-debugsource-5.3.18-24.102.1
      kernel-preempt-5.3.18-24.102.1
      kernel-preempt-debuginfo-5.3.18-24.102.1
      kernel-preempt-debugsource-5.3.18-24.102.1
      kernel-preempt-devel-5.3.18-24.102.1
      kernel-preempt-devel-debuginfo-5.3.18-24.102.1
      kernel-syms-5.3.18-24.102.1

   - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch):

      kernel-devel-5.3.18-24.102.1
      kernel-docs-5.3.18-24.102.1
      kernel-macros-5.3.18-24.102.1
      kernel-source-5.3.18-24.102.1

   - SUSE Linux Enterprise High Availability 15-SP2 (aarch64 ppc64le s390x x86_64):

      cluster-md-kmp-default-5.3.18-24.102.1
      cluster-md-kmp-default-debuginfo-5.3.18-24.102.1
      dlm-kmp-default-5.3.18-24.102.1
      dlm-kmp-default-debuginfo-5.3.18-24.102.1
      gfs2-kmp-default-5.3.18-24.102.1
      gfs2-kmp-default-debuginfo-5.3.18-24.102.1
      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1
      ocfs2-kmp-default-5.3.18-24.102.1
      ocfs2-kmp-default-debuginfo-5.3.18-24.102.1

   - SUSE Enterprise Storage 7 (aarch64 x86_64):

      kernel-default-5.3.18-24.102.1
      kernel-default-base-5.3.18-24.102.1.9.48.1
      kernel-default-debuginfo-5.3.18-24.102.1
      kernel-default-debugsource-5.3.18-24.102.1
      kernel-default-devel-5.3.18-24.102.1
      kernel-default-devel-debuginfo-5.3.18-24.102.1
      kernel-obs-build-5.3.18-24.102.1
      kernel-obs-build-debugsource-5.3.18-24.102.1
      kernel-preempt-5.3.18-24.102.1
      kernel-preempt-debuginfo-5.3.18-24.102.1
      kernel-preempt-debugsource-5.3.18-24.102.1
      kernel-preempt-devel-5.3.18-24.102.1
      kernel-preempt-devel-debuginfo-5.3.18-24.102.1
      kernel-syms-5.3.18-24.102.1
      reiserfs-kmp-default-5.3.18-24.102.1
      reiserfs-kmp-default-debuginfo-5.3.18-24.102.1

   - SUSE Enterprise Storage 7 (noarch):

      kernel-devel-5.3.18-24.102.1
      kernel-docs-5.3.18-24.102.1
      kernel-macros-5.3.18-24.102.1
      kernel-source-5.3.18-24.102.1


References:

   https://www.suse.com/security/cve/CVE-2021-22600.html
   https://www.suse.com/security/cve/CVE-2021-39648.html
   https://www.suse.com/security/cve/CVE-2021-39657.html
   https://www.suse.com/security/cve/CVE-2021-45095.html
   https://www.suse.com/security/cve/CVE-2022-0330.html
   https://www.suse.com/security/cve/CVE-2022-0435.html
   https://www.suse.com/security/cve/CVE-2022-22942.html
   https://bugzilla.suse.com/1177599
   https://bugzilla.suse.com/1183405
   https://bugzilla.suse.com/1185377
   https://bugzilla.suse.com/1188605
   https://bugzilla.suse.com/1193096
   https://bugzilla.suse.com/1193506
   https://bugzilla.suse.com/1193861
   https://bugzilla.suse.com/1193864
   https://bugzilla.suse.com/1193867
   https://bugzilla.suse.com/1194048
   https://bugzilla.suse.com/1194227
   https://bugzilla.suse.com/1194880
   https://bugzilla.suse.com/1195009
   https://bugzilla.suse.com/1195065
   https://bugzilla.suse.com/1195184
   https://bugzilla.suse.com/1195254

SUSE: 2022:0365-1 critical: the Linux Kernel

February 10, 2022
An update that solves 7 vulnerabilities and has 9 fixes is now available

Summary

The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). - CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bnc#1193867). - CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065). - CVE-2021-22600: Fixed double free bug in packet_set_ring() in net/packet/af_packet.c that could have been exploited by a local user through crafted syscalls to escalate privileges or deny service (bnc#1195184). - CVE-2021-39657: Fixed out of bounds read due to a missing bounds check in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local information disclosure with System execution privileges needed (bnc#1193864). - CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a race condition in gadget_dev_desc_UDC_show of configfs.c. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1193861). - CVE-2022-0330: Fixed flush TLBs before releasing backing store (bsc#1194880). The following non-security bugs were fixed: - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() (bsc#1194227). - btrfs: tree-checker: Add EXTENT_ITEM and METADATA_ITEM check (bsc#1195009). - btrfs: tree-checker: annotate all error branches as unlikely (bsc#1195009). - btrfs: tree-checker: check for BTRFS_BLOCK_FLAG_FULL_BACKREF being set improperly (bsc#1195009). - hv_netvsc: Set needed_headroom according to VF (bsc#1193506). - net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506). - net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506). - net: allow retransmitting a TCP packet if original is still in queue (bsc#1188605 bsc#1187428). - net: mana: Add RX fencing (bsc#1193506). - net: mana: Add XDP support (bsc#1193506). - net: sch_generic: aviod concurrent reset and enqueue op for lockless qdisc (bsc#1183405). - net: sched: add barrier to ensure correct ordering for lockless qdisc (bsc#1183405). - net: sched: avoid unnecessary seqcount operation for lockless qdisc (bsc#1183405). - net: sched: fix packet stuck problem for lockless qdisc (bsc#1183405). - net: sched: fix tx action reschedule issue with stopped queue (bsc#1183405). - net: sched: fix tx action rescheduling issue during deactivation (bsc#1183405). - net: sched: replaced invalid qdisc tree flush helper in qdisc_replace (bsc#1183405). - net_sched: avoid resetting active qdisc for multiple times (bsc#1183405). - net_sched: get rid of unnecessary dev_qdisc_reset() (bsc#1183405). - net_sched: use qdisc_reset() in qdisc_destroy() (bsc#1183405). - nvme: add 'iopolicy' module parameter (bsc#1177599 bsc#1193096). - xfrm: fix MTU regression (bsc#1185377, bsc#1194048).

References

#1177599 #1183405 #1185377 #1188605 #1193096

#1193506 #1193861 #1193864 #1193867 #1194048

#1194227 #1194880 #1195009 #1195065 #1195184

#1195254

Cross- CVE-2021-22600 CVE-2021-39648 CVE-2021-39657

CVE-2021-45095 CVE-2022-0330 CVE-2022-0435

CVE-2022-22942

CVSS scores:

CVE-2021-22600 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-22600 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2021-39648 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CVE-2021-39657 (SUSE): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVE-2021-45095 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2021-45095 (SUSE): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CVE-2022-0435 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2022-22942 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:

SUSE Enterprise Storage 7

SUSE Linux Enterprise High Availability 15-SP2

SUSE Linux Enterprise High Performance Computing 15-SP2

SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS

SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS

SUSE Linux Enterprise Micro 5.0

SUSE Linux Enterprise Module for Live Patching 15-SP2

SUSE Linux Enterprise Realtime Extension 15-SP2

SUSE Linux Enterprise Server 15-SP2

SUSE Linux Enterprise Server 15-SP2-BCL

SUSE Linux Enterprise Server 15-SP2-LTSS

SUSE Linux Enterprise Server for SAP 15-SP2

SUSE Linux Enterprise Server for SAP Applications 15-SP2

SUSE Linux Enterprise Storage 7

SUSE Manager Proxy 4.1

SUSE Manager Retail Branch Server 4.1

SUSE Manager Server 4.1

https://www.suse.com/security/cve/CVE-2021-22600.html

https://www.suse.com/security/cve/CVE-2021-39648.html

https://www.suse.com/security/cve/CVE-2021-39657.html

https://www.suse.com/security/cve/CVE-2021-45095.html

https://www.suse.com/security/cve/CVE-2022-0330.html

https://www.suse.com/security/cve/CVE-2022-0435.html

https://www.suse.com/security/cve/CVE-2022-22942.html

https://bugzilla.suse.com/1177599

https://bugzilla.suse.com/1183405

https://bugzilla.suse.com/1185377

https://bugzilla.suse.com/1188605

https://bugzilla.suse.com/1193096

https://bugzilla.suse.com/1193506

https://bugzilla.suse.com/1193861

https://bugzilla.suse.com/1193864

https://bugzilla.suse.com/1193867

https://bugzilla.suse.com/1194048

https://bugzilla.suse.com/1194227

https://bugzilla.suse.com/1194880

https://bugzilla.suse.com/1195009

https://bugzilla.suse.com/1195065

https://bugzilla.suse.com/1195184

https://bugzilla.suse.com/1195254

Severity
Announcement ID: SUSE-SU-2022:0365-1
Rating: critical

Related News

Krasue RAT Malware Hides on Linux Servers Using Embedded Rootkits

Dec 7, 2023

Kali Linux 2023.4 Released With New Hacking Tools

Dec 6, 2023

Nitrux 3.2.0 Linux Distro Released with Enhanced Security and New Features

Nov 28, 2023

Severe Firefox, Thunderbird Bugs Could Lead to System Takeover

Dec 2, 2023

News

Advisories

HOWTOs

Features

Password Guessing as an Attack Vector
Using Open Source to Ensure Compliance & Data Integrity through Data Governance
Critical Linux Kernel Bugs Lead to DoS, Privilege Escalation - Patch Now!
Unlocking the Future of Authentication: Passkeys vs. Passwords
Empowering MSPs with Straightforward Linux Device Management

About Us

Powered By

Footer Logo