Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

SUSE: 2022:1407-1 Important: Multiple Linux Kernel Issues Fixed

suse
Calendar Grey April 26, 2022
Scroller Suse
SUSE has launched a security enhancement targeting 15 vulnerabilities within the Linux Kernel, improving both system resilience and defense mechanisms.
An update that solves 15 vulnerabilities and has 34 fixes is now available

Summary

The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-0854: Fixed a memory leak flaw was found in the Linux kernels DMA subsystem. This flaw allowed a local user to read random memory from the kernel space. (bnc#1196823) - CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197227) - CVE-2022-1199: Fixed null-ptr-deref and use-after-free vulnerabilities that allow an attacker to crash the linux kernel by simulating Amateur Radio. (bsc#1198028) - CVE-2022-1205: Fixed null pointer dereference and use-after-free

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow important memory leak stack overflow linux kernel

References

#1065729 #1156395 #1175667 #1177028 #1178134

#1179639 #1180153 #1189562 #1194625 #1194649

#1195640 #1195926 #1196018 #1196196 #1196478

#1196761 #1196823 #1197227 #1197243 #1197300

#1197302 #1197331 #1197343 #1197366 #1197389

#1197462 #1197501 #1197534 #1197661 #1197675

#1197677 #1197702 #1197811 #1197812 #1197815

#1197817 #1197819 #1197820 #1197888 #1197889

#1197894 #1198027 #1198028 #1198029 #1198030

#1198031 #1198032 #1198033 #1198077

Cross- CVE-2021-45868 CVE-2022-0850 CVE-2022-0854

CVE-2022-1011 CVE-2022-1016 CVE-2022-1048

CVE-2022-1055 CVE-2022-1195 CVE-2022-1198

CVE-2022-1199 CVE-2022-1205 CVE-2022-27666

CVE-2022-28388 CVE-2022-28389 CVE-2022-28390

CVSS scores:

CVE-2021-45868 (N...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:1407-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow important memory leak stack overflow linux kernel

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.