Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP3) SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:0436-1 Final 1 1 2022-02-16T10:55:22Z current 2022-02-16T10:55:22Z 2022-02-16T10:55:22Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP3) This update for the Linux Kernel 5.3.18-59_40 fixes several issues. The following security issues were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195308). - CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1194460). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-436,SUSE-SLE-Module-Live-Patching-15-SP3-2022-436 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20220436-1/ Link for SUSE-SU-2022:0436-1 https://lists.suse.com/pipermail/sle-security-updates/2022-February/010229.html E-Mail link for SUSE-SU-2022:0436-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1194460 SUSE Bug 1194460 https://bugzilla.suse.com/1195308 SUSE Bug 1195308 https://www.suse.com/security/cve/CVE-2021-4083/ SUSE CVE CVE-2021-4083 page https://www.suse.com/security/cve/CVE-2022-0435/ SUSE CVE CVE-2022-0435 page SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-59_40-default-3-150300.2.2 kernel-livepatch-5_3_18-59_40-preempt-3-150300.2.2 kernel-livepatch-5_3_18-59_40-default-3-150300.2.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4. CVE-2021-4083 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_40-default-3-150300.2.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220436-1/ https://www.suse.com/security/cve/CVE-2021-4083.html CVE-2021-4083 https://bugzilla.suse.com/1193727 SUSE Bug 1193727 https://bugzilla.suse.com/1194460 SUSE Bug 1194460 https://bugzilla.suse.com/1196722 SUSE Bug 1196722 A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network. CVE-2022-0435 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-59_40-default-3-150300.2.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220436-1/ https://www.suse.com/security/cve/CVE-2022-0435.html CVE-2022-0435 https://bugzilla.suse.com/1195254 SUSE Bug 1195254 https://bugzilla.suse.com/1195308 SUSE Bug 1195308