[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255116

 
 

909

 
 

198683

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2022:2083-1 -- SLES kernel

ID: oval:org.secpod.oval:def:89046398Date: (C)2022-06-17   (M)2024-05-22
Class: PATCHFamily: unix




The SUSE Linux Enterprise 12 SP4 kernel was updated. The following security bugs were fixed: - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. - CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. - CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. - CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. - CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. - CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module . - CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. - CVE-2021-39711: Fixed a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation . - CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag . - CVE-2021-33061: Fixed insufficient control flow management for the Intel 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access . - CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect . - CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system . - CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create . - CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c . - CVE-2019-20811: Fixed issue in rx_queue_add_kobject and netdev_queue_add_kobject in net/core/net-sysfs.c, where a reference count is mishandled . - CVE-2021-38208: Fixed a denial of service by making a getsockname call after a certain type of failure of a bind call . - CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c. - CVE-2021-20292: Fixed object validation prior to performing operations on the object in nouveau_sgdma_create_ttm in Nouveau DRM subsystem . - CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. The following non-security bugs were fixed: - btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized . - btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized . - debug: Lock down kgdb . - dimlib: make DIMLIB a hidden symbol . - lib/dim: Fix -Wunused-const-variable warnings . - lib/dim: fix help text typos . - linux/dim: Add completions count to dim_sample . - linux/dim: Fix overflow in dim calculation . - linux/dim: Implement RDMA adaptive moderation . - linux/dim: Move implementation to .c files . - linux/dim: Move logic to dim.h . - linux/dim: Remove net prefix from internal DIM members . - linux/dim: Rename externally exposed macros . - linux/dim: Rename externally used net_dim members . - linux/dim: Rename net_dim_sample to net_dim_update_sample . - net: ena: A typo fix in the file ena_com.h . - net: ena: Add capabilities field with support for ENI stats capability . - net: ena: add device distinct log prefix to files . - net: ena: Add first_interrupt field to napi struct . - net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it . - net: ena: add jiffies of last napi call to stats . - net: ena: add missing ethtool TX timestamping indication . - net: ena: add reserved PCI device ID . - net: ena: add support for reporting of packet drops . - net: ena: add support for the rx offset feature . - net: ena: add support for traffic mirroring . - net: ena: add unmask interrupts statistics to ethtool . - net: ena: aggregate stats increase into a function . - net: ena: allow setting the hash function without changing the key . - net: ena: avoid memory access violation by validating req_id properly . - net: ena: avoid unnecessary admin command when RSS function set fails . - net: ena: avoid unnecessary rearming of interrupt vector when busy-polling . - net: ena: Capitalize all log strings and improve code readability . - net: ena: change default RSS hash function to Toeplitz . - net: ena: Change ENI stats support check to use capabilities field . - net: ena: Change license into format to SPDX in all files . - net: ena: Change log message to netif/dev function . - net: ena: change num_queues to num_io_queues for clarity and consistency . - net: ena: Change return value of ena_calc_io_queue_size to void . - net: ena: Change RSS related macros and variables names . - net: ena: Change the name of bad_csum variable . - net: ena: changes to RSS hash key allocation . - net: ena: clean up indentation issue . - net: ena: cosmetic: change ena_com_stats_admin stats to u64 . - net: ena: cosmetic: code reorderings . - net: ena: cosmetic: extract code to ena_indirection_table_set . - net: ena: cosmetic: fix line break issues . - net: ena: cosmetic: fix spacing issues . - net: ena: cosmetic: fix spelling and grammar mistakes in comments . - net: ena: cosmetic: minor code changes . - net: ena: cosmetic: remove unnecessary code . - net: ena: cosmetic: remove unnecessary spaces and tabs in ena_com.h macros . - net: ena: cosmetic: rename ena_update_tx/rx_rings_intr_moderation . - net: ena: cosmetic: set queue sizes to u32 for consistency . - net: ena: do not wake up tx queue when down . - net: ena: drop superfluous prototype . - net: ena: ena-com.c: prevent NULL pointer dereference . - net: ena: enable support of rss hash key and function changes . - net: ena: enable the interrupt_moderation in driver_supported_features . - net: ena: ethtool: Add new device statistics . - net: ena: ethtool: clean up minor indentation issue . - net: ena: ethtool: convert stat_offset to 64 bit resolution . - net: ena: ethtool: get_channels: use combined only . - net: ena: ethtool: remove redundant non-zero check on rc . - net: ena: ethtool: support set_channels callback . - net: ena: ethtool: use correct value for crc32 hash . - net: ena: Fix all static chekers" warnings . - net: ena: Fix build warning in ena_xdp_set . - net: ena: fix coding style nits . - net: ena: fix continuous keep-alive resets . - net: ena: fix corruption of dev_idx_to_host_tbl . - net: ena: fix default tx interrupt moderation interval . - net: ena: fix ena_com_comp_status_to_errno return value . - net: ena: Fix error handling when calculating max IO queues number . - net: ena: fix error returning in ena_com_get_hash_function . - net: ena: fix inaccurate print type . - net: ena: fix incorrect default RSS key . - net: ena: fix incorrect setting of the number of msix vectors . - net: ena: fix incorrect update of intr_delay_resolution . - net: ena: fix incorrectly saving queue numbers when setting RSS indirection table . - net: ena: fix issues in setting interrupt moderation params in ethtool . - net: ena: fix packet"s addresses for rx_offset feature . - net: ena: fix potential crash when rxfh key is NULL . - net: ena: fix request of incorrect number of IRQ vectors . - net: ena: fix retrieval of nonadaptive interrupt moderation intervals . - net: ena: fix update of interrupt moderation register . - net: ena: fix uses of round_jiffies . - net: ena: Fix using plain integer as NULL pointer in ena_init_napi_in_range . - net: ena: Fix wrong rx request id by resetting device . - net: ena: handle bad request id in ena_netdev . - net: ena: Improve error logging in driver . - net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE . - net: ena: make ethtool -l show correct max number of queues . - net: ena: Make missed_tx stat incremental . - net: ena: make symbol "ena_alloc_map_page" static . - net: ena: move llq configuration from ena_probe to ena_device_init . - net: ena: Move reset completion print to the reset function . - net: ena: multiple queue creation related cleanups . - net: ena: Prevent reset after device destruction . - net: ena: re-organize code to improve readability . - net: ena: reduce driver load time . - net: ena: reimplement set/get_coalesce . - net: ena: remove all old adaptive rx interrupt moderation code from ena_com . - net: ena: remove code duplication in ena_com_update_nonadaptive_moderation_interval _* . - net: ena: remove code that does nothing . - net: ena: Remove ena_calc_queue_size_ctx struct . - net: ena: remove ena_restore_ethtool_params and relevant fields . - net: ena: remove extra words from comments . - net: ena: Remove module param and change message severity . - net: ena: remove old adaptive interrupt moderation code from ena_netdev . - net: ena: remove redundant print of number of queues . - net: ena: Remove redundant print of placement policy . - net: ena: Remove redundant return code check . - net: ena: remove set but not used variable "hash_key" . - net: ena: Remove unused code . - net: ena: rename ena_com_free_desc to make API more uniform . - net: ena: rss: do not allocate key when not supported . - net: ena: rss: fix failure to get indirection table . - net: ena: rss: store hash function as values and not bits . - net: ena: Select DIMLIB for ENA_ETHERNET . - net: ena: set initial DMA width to avoid intel iommu issue . - net: ena: simplify ena_com_update_intr_delay_resolution . - net: ena: store values in their appropriate variables types . - net: ena: support new LLQ acceleration mode . - net: ena: switch to dim algorithm for rx adaptive interrupt moderation . - net: ena: use constant value for net_device allocation . - net: ena: Use dev_alloc in RX buffer allocation . - net: ena: use explicit variable size for clarity . - net: ena: use SHUTDOWN as reset reason when closing interface . - net: mana: Add counter for packet dropped by XDP . - net: mana: Add counter for XDP_TX . - net: mana: Add handling of CQE_RX_TRUNCATED . - net: mana: Remove unnecessary check of cqe_type in mana_process_rx_cqe . - net: mana: Reuse XDP dropped page . - net: mana: Use struct_size helper in mana_gd_create_dma_region . - net: update net_dim documentation after rename . - PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time . - powerpc/pseries: extract host bridge from pci_bus prior to bus removal . - powerpc/pseries: Fix use after free in remove_phb_dynamic . - scsi: scsi_dh_alua: Avoid crash during alua_bus_detach . - x86/pm: Save the MSR validity status at context setup . - x86/speculation: Restore speculation related MSRs during S3 resume . Special Instructions and Notes: Please reboot the system after installing this update.

Platform:
SUSE Linux Enterprise Server 12 SP4
Product:
kernel
Reference:
SUSE-SU-2022:2083-1
CVE-2019-20811
CVE-2021-20292
CVE-2021-20321
CVE-2021-33061
CVE-2021-38208
CVE-2021-39711
CVE-2021-43389
CVE-2022-1011
CVE-2022-1353
CVE-2022-1419
CVE-2022-1516
CVE-2022-1652
CVE-2022-1734
CVE-2022-21123
CVE-2022-21125
CVE-2022-21127
CVE-2022-21166
CVE-2022-21180
CVE-2022-30594
CVE    19
CVE-2021-33061
CVE-2021-39711
CVE-2022-1419
CVE-2022-1734
...

© SecPod Technologies