Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 526
Alerts This Week
Warning Icon 1 526

SUSE: 2022:1197-1 Important Kernel Update Resolves Multiple Issues

suse
Calendar Grey April 14, 2022
Dist Suse Esm H88
SUSE-SU-2022:1197-2 critical kernel enhancement addresses 23 vulnerabilities and strengthens system protective measures.
An update that solves 21 vulnerabilities and has 7 fixes is now available

Summary

The SUSE Linux Enterprise 15 SP2 kernel was updated. The following security bugs were fixed: - CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-after-free if there is a corrupted quota file. (bnc#1197366) - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197462) - CVE-2022-0850: Fixed a kernel information leak vulnerability in iov_iter.c. (bsc#1196761) - CVE-2022-1055: Fixed a use-after-free in tc_new_tfilter that could allow a local attacker to gain privilege escalation. (bnc#1197702) - CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to

Topics%20covered

Topics Covered

security advisory buffer overflow kernel update privilege escalation system patch SUSE Linux software fixes

References

#1179639 #1189562 #1193731 #1194943 #1195051

#1195254 #1195353 #1195403 #1195939 #1196018

#1196196 #1196468 #1196488 #1196761 #1196823

#1196830 #1196836 #1196956 #1197227 #1197331

#1197366 #1197389 #1197462 #1197702 #1197914

#1198031 #1198032 #1198033

Cross- CVE-2021-0920 CVE-2021-39698 CVE-2021-45868

CVE-2022-0850 CVE-2022-0854 CVE-2022-1016

CVE-2022-1048 CVE-2022-1055 CVE-2022-23036

CVE-2022-23037 CVE-2022-23038 CVE-2022-23039

CVE-2022-23040 CVE-2022-23041 CVE-2022-23042

CVE-2022-26490 CVE-2022-26966 CVE-2022-27666

CVE-2022-28388 CVE-2022-28389 CVE-2022-28390

CVSS scores:

CVE-2021-0920 (NVD) : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CVE-2021-0920 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:1197-1
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow kernel update privilege escalation system patch SUSE Linux software fixes

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.