SUSE 2022:1257-1 Important: Linux Kernel Local Escalation Threat
suse
April 19, 2022
An update that solves 33 vulnerabilities, contains one feature and has 9 fixes is now available
Summary
The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-0854: Fixed a memory leak flaw was found in the Linux kernels DMA subsystem. This flaw allowed a local user to read random memory from the kernel space (bnc#1196823). - CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel (bnc#1198032). - CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel (bnc#1198033). - CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031). - CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock
References
#1179639 #1189126 #1189562 #1193731 #1194516
#1194943 #1195051 #1195254 #1195286 #1195353
#1195403 #1195516 #1195543 #1195612 #1195897
#1195905 #1195939 #1195987 #1196018 #1196079
#1196095 #1196155 #1196196 #1196235 #1196468
#1196488 #1196612 #1196761 #1196776 #1196823
#1196830 #1196836 #1196956 #1197227 #1197331
#1197366 #1197389 #1197462 #1197702 #1198031
#1198032 #1198033 SLE-23652
Cross- CVE-2021-0920 CVE-2021-39698 CVE-2021-44879
CVE-2021-45868 CVE-2022-0487 CVE-2022-0492
CVE-2022-0516 CVE-2022-0617 CVE-2022-0644
CVE-2022-0850 CVE-2022-0854 CVE-2022-1016
CVE-2022-1048 CVE-2022-1055 CVE-2022-23036
CVE-2022-23037 CVE-2022-23038 CVE-2022-23039
CVE-2022-23040 CVE-2022-23041 CVE-2022-23042
...
Read the Full Advisory
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2022:1257-1
Rating: important
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!