[openSUSE-SU-2022:0768-1] Security update for the Linux Kernel
Severity
Important
Affected Packages
21
CVEs
10
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.
Transient execution side-channel attacks attacking the Branch History Buffer (BHB),
named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.
The following security bugs were fixed:
- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).
- CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079)
- CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd() (bsc#1196155).
- CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987).
- CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).
- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
- CVE-2022-24448: Fixed an issue in fs/nfs/dir.c. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).
The following non-security bugs were fixed:
- crypto: af_alg - get_page upon reassignment to TX SGL (bsc#1195840).
- lib/iov_iter: initialize 'flags' in new pipe_buffer (bsc#1196584).
- ID
- openSUSE-SU-2022:0768-1
- Severity
- important
- URL
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MWGLT5YBYSSX5MP2JBKT3N3QV2IWMC5F/
- Published
-
2022-03-09T09:09:29
(2 years ago) - Modified
-
2022-03-09T09:09:29
(2 years ago) - Rights
- Copyright 2024 SUSE LLC. All rights reserved.
- Other Advisories
-
- ALAS-2022-1563
- ALAS-2022-1571
- ALAS2-2022-1749
- ALAS2-2022-1761
- ALSA-2022:0825
- ALSA-2022:1988
- ALSA-2022:7683
- ALSA-2022:8267
- ASB-A-220741611
- CISA-2022:0425
- DSA-5092-1
- DSA-5095-1
- DSA-5096-1
- DSA-5594-1
- ELSA-2022-0825
- ELSA-2022-1988
- ELSA-2022-4642
- ELSA-2022-7683
- ELSA-2022-8267
- ELSA-2022-9141
- ELSA-2022-9142
- ELSA-2022-9147
- ELSA-2022-9148
- ELSA-2022-9179
- ELSA-2022-9180
- ELSA-2022-9210
- ELSA-2022-9211
- ELSA-2022-9212
- ELSA-2022-9213
- ELSA-2022-9244
- ELSA-2022-9245
- ELSA-2022-9273
- ELSA-2022-9274
- ELSA-2022-9313
- ELSA-2022-9314
- ELSA-2022-9348
- ELSA-2022-9477
- ELSA-2022-9478
- ELSA-2022-9667
- ELSA-2022-9781
- ELSA-2024-12570
- ELSA-2024-12571
- MS:CVE-2021-44879
- MS:CVE-2022-0487
- MS:CVE-2022-0492
- MS:CVE-2022-0617
- MS:CVE-2022-0847
- MS:CVE-2022-24448
- MS:CVE-2022-24959
- openSUSE-SU-2022:0755-1
- openSUSE-SU-2022:0760-1
- openSUSE-SU-2022:0940-1
- openSUSE-SU-2022:1037-1
- openSUSE-SU-2022:1039-1
- RHSA-2022:0819
- RHSA-2022:0825
- RHSA-2022:0849
- RHSA-2022:1975
- RHSA-2022:1988
- RHSA-2022:4642
- RHSA-2022:4644
- RHSA-2022:4655
- RHSA-2022:7444
- RHSA-2022:7683
- RHSA-2022:7933
- RHSA-2022:8267
- RLSA-2022:1988
- RLSA-2022:7683
- RLSA-2022:819
- SSA:2022-067-01
- SSA:2022-129-01
- SUSE-SU-2022:0555-1
- SUSE-SU-2022:0755-1
- SUSE-SU-2022:0756-1
- SUSE-SU-2022:0757-1
- SUSE-SU-2022:0759-1
- SUSE-SU-2022:0760-1
- SUSE-SU-2022:0761-1
- SUSE-SU-2022:0762-1
- SUSE-SU-2022:0763-1
- SUSE-SU-2022:0764-1
- SUSE-SU-2022:0765-1
- SUSE-SU-2022:0766-1
- SUSE-SU-2022:0767-1
- SUSE-SU-2022:0768-1
- SUSE-SU-2022:0931-1
- SUSE-SU-2022:0939-1
- SUSE-SU-2022:0940-1
- SUSE-SU-2022:0978-1
- SUSE-SU-2022:0984-1
- SUSE-SU-2022:0991-1
- SUSE-SU-2022:0998-1
- SUSE-SU-2022:1012-1
- SUSE-SU-2022:1035-1
- SUSE-SU-2022:1036-1
- SUSE-SU-2022:1037-1
- SUSE-SU-2022:1038-1
- SUSE-SU-2022:1039-1
- SUSE-SU-2022:1196-1
- SUSE-SU-2022:1257-1
- SUSE-SU-2022:1285-1
- SUSE-SU-2022:1300-1
- SUSE-SU-2022:1359-1
- SUSE-SU-2022:1375-1
- SUSE-SU-2022:1408-1
- SUSE-SU-2022:2079-1
- SUSE-SU-2022:2080-1
- SUSE-SU-2022:2520-1
- SUSE-SU-2022:2615-1
- SUSE-SU-2024:1454-1
- SUSE-SU-2024:1489-1
- SUSE-SU-2024:1643-1
- SUSE-SU-2024:1646-1
- SUSE-SU-2024:1648-1
- SUSE-SU-2024:1870-1
- USN-5302-1
- USN-5317-1
- USN-5318-1
- USN-5319-1
- USN-5337-1
- USN-5338-1
- USN-5339-1
- USN-5343-1
- USN-5362-1
- USN-5368-1
- USN-5377-1
- USN-5383-1
- USN-5384-1
- USN-5385-1
- USN-6001-1
- USN-6013-1
- USN-6014-1
- USN-6681-1
- USN-6681-2
- USN-6681-3
- USN-6681-4
- USN-6716-1
- VU:155143
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:rpm/opensuse/kernel-zfcpdump-man?arch=s390x&distro=opensuse-leap-15.3 | opensuse | kernel-zfcpdump-man | < 4.12.14-197.108.1 | opensuse-leap-15.3 | s390x | |
Affected | pkg:rpm/opensuse/kernel-vanilla?arch=x86_64&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla | < 4.12.14-197.108.1 | opensuse-leap-15.3 | x86_64 | |
Affected | pkg:rpm/opensuse/kernel-vanilla?arch=s390x&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla | < 4.12.14-197.108.1 | opensuse-leap-15.3 | s390x | |
Affected | pkg:rpm/opensuse/kernel-vanilla?arch=ppc64le&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla | < 4.12.14-197.108.1 | opensuse-leap-15.3 | ppc64le | |
Affected | pkg:rpm/opensuse/kernel-vanilla?arch=aarch64&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla | < 4.12.14-197.108.1 | opensuse-leap-15.3 | aarch64 | |
Affected | pkg:rpm/opensuse/kernel-vanilla-livepatch-devel?arch=x86_64&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla-livepatch-devel | < 4.12.14-197.108.1 | opensuse-leap-15.3 | x86_64 | |
Affected | pkg:rpm/opensuse/kernel-vanilla-livepatch-devel?arch=s390x&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla-livepatch-devel | < 4.12.14-197.108.1 | opensuse-leap-15.3 | s390x | |
Affected | pkg:rpm/opensuse/kernel-vanilla-livepatch-devel?arch=ppc64le&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla-livepatch-devel | < 4.12.14-197.108.1 | opensuse-leap-15.3 | ppc64le | |
Affected | pkg:rpm/opensuse/kernel-vanilla-livepatch-devel?arch=aarch64&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla-livepatch-devel | < 4.12.14-197.108.1 | opensuse-leap-15.3 | aarch64 | |
Affected | pkg:rpm/opensuse/kernel-vanilla-devel?arch=x86_64&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla-devel | < 4.12.14-197.108.1 | opensuse-leap-15.3 | x86_64 | |
Affected | pkg:rpm/opensuse/kernel-vanilla-devel?arch=s390x&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla-devel | < 4.12.14-197.108.1 | opensuse-leap-15.3 | s390x | |
Affected | pkg:rpm/opensuse/kernel-vanilla-devel?arch=ppc64le&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla-devel | < 4.12.14-197.108.1 | opensuse-leap-15.3 | ppc64le | |
Affected | pkg:rpm/opensuse/kernel-vanilla-devel?arch=aarch64&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla-devel | < 4.12.14-197.108.1 | opensuse-leap-15.3 | aarch64 | |
Affected | pkg:rpm/opensuse/kernel-vanilla-base?arch=x86_64&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla-base | < 4.12.14-197.108.1 | opensuse-leap-15.3 | x86_64 | |
Affected | pkg:rpm/opensuse/kernel-vanilla-base?arch=s390x&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla-base | < 4.12.14-197.108.1 | opensuse-leap-15.3 | s390x | |
Affected | pkg:rpm/opensuse/kernel-vanilla-base?arch=ppc64le&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla-base | < 4.12.14-197.108.1 | opensuse-leap-15.3 | ppc64le | |
Affected | pkg:rpm/opensuse/kernel-vanilla-base?arch=aarch64&distro=opensuse-leap-15.3 | opensuse | kernel-vanilla-base | < 4.12.14-197.108.1 | opensuse-leap-15.3 | aarch64 | |
Affected | pkg:rpm/opensuse/kernel-kvmsmall-base?arch=x86_64&distro=opensuse-leap-15.3 | opensuse | kernel-kvmsmall-base | < 4.12.14-197.108.1 | opensuse-leap-15.3 | x86_64 | |
Affected | pkg:rpm/opensuse/kernel-default-man?arch=s390x&distro=opensuse-leap-15.3 | opensuse | kernel-default-man | < 4.12.14-197.108.1 | opensuse-leap-15.3 | s390x | |
Affected | pkg:rpm/opensuse/kernel-debug-base?arch=x86_64&distro=opensuse-leap-15.3 | opensuse | kernel-debug-base | < 4.12.14-197.108.1 | opensuse-leap-15.3 | x86_64 | |
Affected | pkg:rpm/opensuse/kernel-debug-base?arch=ppc64le&distro=opensuse-leap-15.3 | opensuse | kernel-debug-base | < 4.12.14-197.108.1 | opensuse-leap-15.3 | ppc64le |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |