SUSE: 2022:3422-1 Important: Linux Kernel Security Updates
suse
September 27, 2022
An update that solves 11 vulnerabilities and has 21 fixes is now available
Summary
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535). - CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346). - CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347). - CVE-2022-21385: Fixed a flaw in net_rds_alloc_sgs() that allowed unprivileged local users to crash the machine (bnc#1202897). - CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096). - CVE-2022-26373: Fixed non-transparent sharing of return predictor
References
#1054914 #1065729 #1120716 #1179310 #1190397
#1191881 #1194535 #1197158 #1199617 #1201264
#1201420 #1201442 #1201610 #1201726 #1201948
#1202017 #1202096 #1202097 #1202346 #1202347
#1202393 #1202396 #1202528 #1202577 #1202672
#1202830 #1202897 #1202898 #1203013 #1203098
#1203107 #1203126
Cross- CVE-2021-4203 CVE-2022-20368 CVE-2022-20369
CVE-2022-21385 CVE-2022-2588 CVE-2022-26373
CVE-2022-2663 CVE-2022-2977 CVE-2022-3028
CVE-2022-36879 CVE-2022-39188
CVSS scores:
CVE-2021-4203 (NVD) : 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
CVE-2021-4203 (SUSE): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L
CVE-2022-20368 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE-2022-20368 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/U...
Read the Full Advisory
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2022:3422-1
Rating: important
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!