1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2022:3930-1

[SUSE-SU-2022:3930-1] Security update for the Linux Kernel

Severity Important
CVEs 16
Info References Vulnerabilities

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel RT was updated.

The following security bugs were fixed:

  • CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).
  • CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bnc#1198702).
  • CVE-2022-2153: Fixed vulnerability in KVM that could allow an unprivileged local attacker on the host to cause DoS (bnc#1200788).
  • CVE-2022-2964, CVE-2022-28748: Fixed memory corruption issues in ax88179_178a devices (bnc#1202686 bsc#1196018).
  • CVE-2022-3521: Fixed race condition in kcm_tx_work() in net/kcm/kcmsock.c (bnc#1204355).
  • CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bnc#1204354).
  • CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bnc#1204402).
  • CVE-2022-3545: Fixed use-after-free in area_cache_get() in drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bnc#1204415).
  • CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bnc#1204431).
  • CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bnc#1204439).
  • CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bnc#1204479).
  • CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bnc#1204574).
  • CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bnc#1204635).
  • CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bnc#1204646).
  • CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bnc#1204647).
  • CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bnc#1204653).

The following non-security bugs were fixed:

  • amd-xgbe: Update DMA coherency values (git-fixes).
  • bnxt: do not lock the tx queue from napi poll (git-fixes).
  • bnxt_en: Fix RX consumer index logic in the error path (git-fixes).
  • bnxt_en: reverse order of TX disable and carrier off (git-fixes).
  • ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read() (git-fixes).
  • ftrace: Fix char print issue in print_ip_ins() (git-fixes).
  • i40e: Fix flow for IPv6 next header (extension header) (git-fixes).
  • i40e: Fix overwriting flow control settings during driver loading (git-fixes).
  • i40e: improve locking of mac_filter_hash (git-fixes).
  • input: gscps2 - check return value of ioremap() in gscps2_probe() (git-fixes).
  • input: xpad - add supported devices as contributed on github (git-fixes).
  • ip6: fix skb leak in ip6frag_expire_frag_queue (bsc#1202972)
  • kABI: Fix after adding trace_iterator.wait_index (git-fixes).
  • memcg, kmem: do not fail __GFP_NOFAIL charges (bsc#1204755).
  • net/mlx4: Fix EEPROM dump support (git-fixes).
  • net/mlx4_core: Add missed mlx4_free_cmd_mailbox() (git-fixes).
  • net/mlx5e: Remove dependency in IPsec initialization flows (git-fixes).
  • net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning (git-fixes).
  • net: amd-xgbe: Fix network fluctuations when using 1G BELFUSE SFP (git-fixes).
  • net: amd-xgbe: Reset link when the link never comes back (git-fixes).
  • net: dsa: mt7530: add the missing RxUnicast MIB counter (git-fixes).
  • net: ethernet: ezchip: fix UAF in nps_enet_remove (git-fixes).
  • net: lapbether: Prevent racing when checking whether the netif is running (git-fixes).
  • net: marvell: fix MVNETA_TX_IN_PRGRS bit number (git-fixes).
  • net: mvpp2: Put fwnode in error case during ->probe() (git-fixes).
  • net: stmmac: fix watchdog timeout during suspend/resume stress test (git-fixes).
  • net: stmmac: stop each tx channel independently (git-fixes).
  • net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (git-fixes).
  • net: vxge: fix use-after-free in vxge_device_unregister (git-fixes).
  • nvmem: core: Check input parameter for NULL in nvmem_unregister() (bsc#1204241).
  • powerpc/mm/64s: Drop pgd_huge() (bsc#1065729).
  • powerpc/mm: remove pmd_huge/pud_huge stubs and include hugetlb.h (bsc#1065729).
  • powerpc/pci_dn: Add missing of_node_put() (bsc#1065729).
  • powerpc/powernv: add missing of_node_put() in opal_export_attrs() (bsc#1065729).
  • ppp: Fix generating ifname when empty IFLA_IFNAME is specified (git-fixes).
  • ppp: Fix generating ppp unit id when ifname is not specified (git-fixes).
  • quota: widen timestamps for the fs_disk_quota structure (bsc#1203387).
  • r8169: fix jumbo packet handling on RTL8168e (git-fixes).
  • revert 'niu: fix missing checks of niu_pci_eeprom_read' (git-fixes).
  • ring-buffer: Add ring_buffer_wake_waiters() (git-fixes).
  • ring-buffer: Check pending waiters when doing wake ups as well (git-fixes).
  • ring-buffer: Fix race between reset page and reading page (git-fixes).
  • tracing: Add ioctl() to force ring buffer waiters to wake up (git-fixes).
  • tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (git-fixes).
  • tracing: Do not free snapshot if tracer is on cmdline (git-fixes).
  • tracing: Simplify conditional compilation code in tracing_set_tracer() (git-fixes).
  • tracing: Wake up ring buffer waiters on closing of the file (git-fixes).
  • tracing: Wake up waiters when tracing is disabled (git-fixes).
  • usb: core: Fix RST error in hub.c (git-fixes).
  • usb: serial: ch341: add basis for quirk detection (git-fixes).
  • usb: serial: ch341: fix lockup of devices with limited prescaler (git-fixes).
  • usb: serial: ch341: fix lost character on LCR updates (git-fixes).
  • usb: serial: ch341: fix receiver regression (git-fixes).
  • usb: serial: ch341: reimplement line-speed handling (git-fixes).
  • usb: serial: cp210x: add Decagon UCA device id (git-fixes).
  • usb: serial: ftdi_sio: add Omron CS1W-CIF31 device id (git-fixes).
  • usb: serial: option: add Quectel EM060K modem (git-fixes).
  • usb: serial: option: add support for OPPO R11 diag port (git-fixes).
  • xfs: account finobt blocks properly in perag reservation (bsc#1203387).
  • xfs: enable big timestamps (bsc#1203387).
  • xfs: enable new inode btree counters feature (bsc#1203387).
  • xfs: explicitly define inode timestamp range (bsc#1203387).
  • xfs: preserve default grace interval during quotacheck (bsc#1203387).
  • xfs: quota: move to time64_t interfaces (bsc#1203387).
  • xfs: redefine xfs_ictimestamp_t (bsc#1203387).
  • xfs: redefine xfs_timestamp_t (bsc#1203387).
  • xfs: store inode btree block counts in AGI header (bsc#1203387).
  • xfs: use a struct timespec64 for the in-core crtime (bsc#1203387).
  • xfs: use the finobt block counts to speed up mount times (bsc#1203387).
  • xfs: widen ondisk inode timestamps to deal with y2038+ (bsc#1203387).
  • xfs: widen ondisk quota expiration timestamps to handle y2038+ (bsc#1203387).
ID
SUSE-SU-2022:3930-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2022/suse-su-20223930-1/
Published
2022-11-10T09:24:50
(22 months ago)
Modified
2022-11-10T09:24:50
(22 months ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Source # ID Name URL
Suse SUSE ratings https://www.suse.com/support/security/rating/
Suse URL of this CSAF notice https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_3930-1.json
Suse URL for SUSE-SU-2022:3930-1 https://www.suse.com/support/update/announcement/2022/suse-su-20223930-1/
Suse E-Mail link for SUSE-SU-2022:3930-1 https://lists.suse.com/pipermail/sle-security-updates/2022-November/012869.html
Bugzilla SUSE Bug 1065729 https://bugzilla.suse.com/1065729
Bugzilla SUSE Bug 1198702 https://bugzilla.suse.com/1198702
Bugzilla SUSE Bug 1200788 https://bugzilla.suse.com/1200788
Bugzilla SUSE Bug 1202686 https://bugzilla.suse.com/1202686
Bugzilla SUSE Bug 1202972 https://bugzilla.suse.com/1202972
Bugzilla SUSE Bug 1203387 https://bugzilla.suse.com/1203387
Bugzilla SUSE Bug 1204241 https://bugzilla.suse.com/1204241
Bugzilla SUSE Bug 1204354 https://bugzilla.suse.com/1204354
Bugzilla SUSE Bug 1204355 https://bugzilla.suse.com/1204355
Bugzilla SUSE Bug 1204402 https://bugzilla.suse.com/1204402
Bugzilla SUSE Bug 1204415 https://bugzilla.suse.com/1204415
Bugzilla SUSE Bug 1204431 https://bugzilla.suse.com/1204431
Bugzilla SUSE Bug 1204439 https://bugzilla.suse.com/1204439
Bugzilla SUSE Bug 1204479 https://bugzilla.suse.com/1204479
Bugzilla SUSE Bug 1204574 https://bugzilla.suse.com/1204574
Bugzilla SUSE Bug 1204635 https://bugzilla.suse.com/1204635
Bugzilla SUSE Bug 1204646 https://bugzilla.suse.com/1204646
Bugzilla SUSE Bug 1204647 https://bugzilla.suse.com/1204647
Bugzilla SUSE Bug 1204653 https://bugzilla.suse.com/1204653
Bugzilla SUSE Bug 1204755 https://bugzilla.suse.com/1204755
Bugzilla SUSE Bug 1204868 https://bugzilla.suse.com/1204868
CVE SUSE CVE CVE-2021-4037 page https://www.suse.com/security/cve/CVE-2021-4037/
CVE SUSE CVE CVE-2022-2153 page https://www.suse.com/security/cve/CVE-2022-2153/
CVE SUSE CVE CVE-2022-2964 page https://www.suse.com/security/cve/CVE-2022-2964/
CVE SUSE CVE CVE-2022-3521 page https://www.suse.com/security/cve/CVE-2022-3521/
CVE SUSE CVE CVE-2022-3524 page https://www.suse.com/security/cve/CVE-2022-3524/
CVE SUSE CVE CVE-2022-3542 page https://www.suse.com/security/cve/CVE-2022-3542/
CVE SUSE CVE CVE-2022-3545 page https://www.suse.com/security/cve/CVE-2022-3545/
CVE SUSE CVE CVE-2022-3565 page https://www.suse.com/security/cve/CVE-2022-3565/
CVE SUSE CVE CVE-2022-3586 page https://www.suse.com/security/cve/CVE-2022-3586/
CVE SUSE CVE CVE-2022-3594 page https://www.suse.com/security/cve/CVE-2022-3594/
CVE SUSE CVE CVE-2022-3621 page https://www.suse.com/security/cve/CVE-2022-3621/
CVE SUSE CVE CVE-2022-3628 page https://www.suse.com/security/cve/CVE-2022-3628/
CVE SUSE CVE CVE-2022-3629 page https://www.suse.com/security/cve/CVE-2022-3629/
CVE SUSE CVE CVE-2022-3646 page https://www.suse.com/security/cve/CVE-2022-3646/
CVE SUSE CVE CVE-2022-3649 page https://www.suse.com/security/cve/CVE-2022-3649/
CVE SUSE CVE CVE-2022-43750 page https://www.suse.com/security/cve/CVE-2022-43750/
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date