Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:0477-1 Final 1 1 2022-02-17T13:41:34Z current 2022-02-17T13:41:34Z 2022-02-17T13:41:34Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-25020: Fixed an overflow in the BPF subsystem due to a mishandling of a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions. This affects kernel/bpf/core.c and net/core/filter.c (bnc#1193575). - CVE-2019-0136: Fixed insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver that may have allowed an unauthenticated user to potentially enable denial of service via adjacent access (bnc#1193157). - CVE-2020-35519: Fixed out-of-bounds memory access in x25_bind in net/x25/af_x25.c. A bounds check failure allowed a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information (bnc#1183696). - CVE-2021-0935: Fixed possible out of bounds write in ip6_xmit of ip6_output.c due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192032). - CVE-2021-28711: Fixed issue with xen/blkfront to harden blkfront against event channel storms (XSA-391) (bsc#1193440). - CVE-2021-28712: Fixed issue with xen/netfront to harden netfront against event channel storms (XSA-391) (bsc#1193440). - CVE-2021-28713: Fixed issue with xen/console to harden hvc_xen against event channel storms (XSA-391) (bsc#1193440). - CVE-2021-28715: Fixed issue with xen/netback to do not queue unlimited number of packages (XSA-392) (bsc#1193442). - CVE-2021-33098: Fixed improper input validation in the Intel(R) Ethernet ixgbe driver that may have allowed an authenticated user to potentially cause denial of service via local access (bnc#1192877). - CVE-2021-3564: Fixed double-free memory corruption in the Linux kernel HCI device initialization subsystem that could have been used by attaching malicious HCI TTY Bluetooth devices. A local user could use this flaw to crash the system (bnc#1186207). - CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a race condition in gadget_dev_desc_UDC_show of configfs.c. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1193861). - CVE-2021-39657: Fixed out of bounds read due to a missing bounds check in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local information disclosure with System execution privileges needed (bnc#1193864). - CVE-2021-4002: Fixed incorrect TLBs flush in hugetlbfs after huge_pmd_unshare (bsc#1192946). - CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1193727). - CVE-2021-4149: Fixed btrfs unlock newly allocated extent buffer after error (bsc#1194001). - CVE-2021-4155: Fixed XFS map issue when unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (bsc#1194272). - CVE-2021-4197: Use cgroup open-time credentials for process migraton perm checks (bsc#1194302). - CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194529). - CVE-2021-43976: Fixed insufficient access control in drivers/net/wireless/marvell/mwifiex/usb.c that allowed an attacker who connect a crafted USB device to cause denial of service (bnc#1192847). - CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bnc#1193867). - CVE-2021-45485: Fixed information leak in the IPv6 implementation in net/ipv6/output_core.c (bnc#1194094). - CVE-2021-45486: Fixed information leak inside the IPv4 implementation caused by very small hash table (bnc#1194087). - CVE-2022-0330: Fixed flush TLBs before releasing backing store (bsc#1194880). The following non-security bugs were fixed: - kprobes: Limit max data_size of the kretprobe instances (bsc#1193669). - memstick: rtsx_usb_ms: fix UAF - moxart: fix potential use-after-free on remove path (bsc1194516). - net/x25: fix a race in x25_bind() (networking-stable-19_03_15). - ring-buffer: Protect ring_buffer_reset() from reentrancy (bsc#1179960). - tty: hvc: replace BUG_ON() with negative return value (git-fixes). - xen-netfront: do not assume sk_buff_head list is empty in error handling (git-fixes). - xen-netfront: do not use ~0U as error return value for xennet_fill_frags() (git-fixes). - xen/blkfront: do not take local copy of a request from the ring page (git-fixes). - xen/blkfront: do not trust the backend response data blindly (git-fixes). - xen/blkfront: read response from backend only once (git-fixes). - xen/netfront: disentangle tx_skb_freelist (git-fixes). - xen/netfront: do not bug in case of too many frags (bnc#1012382). - xen/netfront: do not cache skb_shinfo() (bnc#1012382). - xen/netfront: do not read data from request on the ring page (git-fixes). - xen/netfront: do not trust the backend response data blindly (git-fixes). - xen/netfront: read response from backend only once (git-fixes). - xen: sync include/xen/interface/io/ring.h with Xen's newest version (git-fixes). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-477,SUSE-SLE-SERVER-12-SP2-BCL-2022-477 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ Link for SUSE-SU-2022:0477-1 https://lists.suse.com/pipermail/sle-security-updates/2022-February/010246.html E-Mail link for SUSE-SU-2022:0477-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1012382 SUSE Bug 1012382 https://bugzilla.suse.com/1179960 SUSE Bug 1179960 https://bugzilla.suse.com/1183696 SUSE Bug 1183696 https://bugzilla.suse.com/1186207 SUSE Bug 1186207 https://bugzilla.suse.com/1192032 SUSE Bug 1192032 https://bugzilla.suse.com/1192847 SUSE Bug 1192847 https://bugzilla.suse.com/1192877 SUSE Bug 1192877 https://bugzilla.suse.com/1192946 SUSE Bug 1192946 https://bugzilla.suse.com/1193157 SUSE Bug 1193157 https://bugzilla.suse.com/1193440 SUSE Bug 1193440 https://bugzilla.suse.com/1193442 SUSE Bug 1193442 https://bugzilla.suse.com/1193575 SUSE Bug 1193575 https://bugzilla.suse.com/1193669 SUSE Bug 1193669 https://bugzilla.suse.com/1193727 SUSE Bug 1193727 https://bugzilla.suse.com/1193861 SUSE Bug 1193861 https://bugzilla.suse.com/1193864 SUSE Bug 1193864 https://bugzilla.suse.com/1193867 SUSE Bug 1193867 https://bugzilla.suse.com/1194001 SUSE Bug 1194001 https://bugzilla.suse.com/1194087 SUSE Bug 1194087 https://bugzilla.suse.com/1194094 SUSE Bug 1194094 https://bugzilla.suse.com/1194272 SUSE Bug 1194272 https://bugzilla.suse.com/1194302 SUSE Bug 1194302 https://bugzilla.suse.com/1194516 SUSE Bug 1194516 https://bugzilla.suse.com/1194529 SUSE Bug 1194529 https://bugzilla.suse.com/1194880 SUSE Bug 1194880 https://www.suse.com/security/cve/CVE-2018-25020/ SUSE CVE CVE-2018-25020 page https://www.suse.com/security/cve/CVE-2019-0136/ SUSE CVE CVE-2019-0136 page https://www.suse.com/security/cve/CVE-2020-35519/ SUSE CVE CVE-2020-35519 page https://www.suse.com/security/cve/CVE-2021-0935/ SUSE CVE CVE-2021-0935 page https://www.suse.com/security/cve/CVE-2021-28711/ SUSE CVE CVE-2021-28711 page https://www.suse.com/security/cve/CVE-2021-28712/ SUSE CVE CVE-2021-28712 page https://www.suse.com/security/cve/CVE-2021-28713/ SUSE CVE CVE-2021-28713 page https://www.suse.com/security/cve/CVE-2021-28715/ SUSE CVE CVE-2021-28715 page https://www.suse.com/security/cve/CVE-2021-33098/ SUSE CVE CVE-2021-33098 page https://www.suse.com/security/cve/CVE-2021-3564/ SUSE CVE CVE-2021-3564 page https://www.suse.com/security/cve/CVE-2021-39648/ SUSE CVE CVE-2021-39648 page https://www.suse.com/security/cve/CVE-2021-39657/ SUSE CVE CVE-2021-39657 page https://www.suse.com/security/cve/CVE-2021-4002/ SUSE CVE CVE-2021-4002 page https://www.suse.com/security/cve/CVE-2021-4083/ SUSE CVE CVE-2021-4083 page https://www.suse.com/security/cve/CVE-2021-4149/ SUSE CVE CVE-2021-4149 page https://www.suse.com/security/cve/CVE-2021-4155/ SUSE CVE CVE-2021-4155 page https://www.suse.com/security/cve/CVE-2021-4197/ SUSE CVE CVE-2021-4197 page https://www.suse.com/security/cve/CVE-2021-4202/ SUSE CVE CVE-2021-4202 page https://www.suse.com/security/cve/CVE-2021-43976/ SUSE CVE CVE-2021-43976 page https://www.suse.com/security/cve/CVE-2021-45095/ SUSE CVE CVE-2021-45095 page https://www.suse.com/security/cve/CVE-2021-45485/ SUSE CVE CVE-2021-45485 page https://www.suse.com/security/cve/CVE-2021-45486/ SUSE CVE CVE-2021-45486 page https://www.suse.com/security/cve/CVE-2022-0330/ SUSE CVE CVE-2022-0330 page SUSE Linux Enterprise Server 12 SP2-BCL cluster-md-kmp-debug-4.4.121-92.164.1 cluster-md-kmp-default-4.4.121-92.164.1 cluster-md-kmp-vanilla-4.4.121-92.164.1 cluster-network-kmp-debug-4.4.121-92.164.1 cluster-network-kmp-default-4.4.121-92.164.1 cluster-network-kmp-vanilla-4.4.121-92.164.1 dlm-kmp-debug-4.4.121-92.164.1 dlm-kmp-default-4.4.121-92.164.1 dlm-kmp-vanilla-4.4.121-92.164.1 gfs2-kmp-debug-4.4.121-92.164.1 gfs2-kmp-default-4.4.121-92.164.1 gfs2-kmp-vanilla-4.4.121-92.164.1 kernel-debug-4.4.121-92.164.1 kernel-debug-base-4.4.121-92.164.1 kernel-debug-devel-4.4.121-92.164.1 kernel-debug-extra-4.4.121-92.164.1 kernel-debug-kgraft-4.4.121-92.164.1 kernel-default-4.4.121-92.164.1 kernel-default-base-4.4.121-92.164.1 kernel-default-devel-4.4.121-92.164.1 kernel-default-extra-4.4.121-92.164.1 kernel-default-kgraft-4.4.121-92.164.1 kernel-default-man-4.4.121-92.164.1 kernel-devel-4.4.121-92.164.1 kernel-docs-4.4.121-92.164.1 kernel-docs-html-4.4.121-92.164.1 kernel-docs-pdf-4.4.121-92.164.1 kernel-macros-4.4.121-92.164.1 kernel-obs-build-4.4.121-92.164.1 kernel-obs-qa-4.4.121-92.164.1 kernel-source-4.4.121-92.164.1 kernel-source-vanilla-4.4.121-92.164.1 kernel-syms-4.4.121-92.164.1 kernel-vanilla-4.4.121-92.164.1 kernel-vanilla-base-4.4.121-92.164.1 kernel-vanilla-devel-4.4.121-92.164.1 kernel-zfcpdump-4.4.121-92.164.1 ocfs2-kmp-debug-4.4.121-92.164.1 ocfs2-kmp-default-4.4.121-92.164.1 ocfs2-kmp-vanilla-4.4.121-92.164.1 kernel-default-4.4.121-92.164.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-base-4.4.121-92.164.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-devel-4.4.121-92.164.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-devel-4.4.121-92.164.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-macros-4.4.121-92.164.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-source-4.4.121-92.164.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-syms-4.4.121-92.164.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c. CVE-2018-25020 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2018-25020.html CVE-2018-25020 https://bugzilla.suse.com/1193575 SUSE Bug 1193575 Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2019-0136 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2019-0136.html CVE-2019-0136 https://bugzilla.suse.com/1193157 SUSE Bug 1193157 https://bugzilla.suse.com/1199615 SUSE Bug 1199615 https://bugzilla.suse.com/1199616 SUSE Bug 1199616 An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2020-35519 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2020-35519.html CVE-2020-35519 https://bugzilla.suse.com/1183696 SUSE Bug 1183696 https://bugzilla.suse.com/1184953 SUSE Bug 1184953 https://bugzilla.suse.com/1211495 SUSE Bug 1211495 In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168607263References: Upstream kernel CVE-2021-0935 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-0935.html CVE-2021-0935 https://bugzilla.suse.com/1192032 SUSE Bug 1192032 https://bugzilla.suse.com/1192042 SUSE Bug 1192042 https://bugzilla.suse.com/1196722 SUSE Bug 1196722 Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713 CVE-2021-28711 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-28711.html CVE-2021-28711 https://bugzilla.suse.com/1193440 SUSE Bug 1193440 Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713 CVE-2021-28712 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-28712.html CVE-2021-28712 Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713 CVE-2021-28713 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-28713.html CVE-2021-28713 Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714) CVE-2021-28715 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-28715.html CVE-2021-28715 Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access. CVE-2021-33098 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-33098.html CVE-2021-33098 https://bugzilla.suse.com/1192877 SUSE Bug 1192877 A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13. CVE-2021-3564 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-3564.html CVE-2021-3564 https://bugzilla.suse.com/1186207 SUSE Bug 1186207 In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-160822094References: Upstream kernel CVE-2021-39648 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-39648.html CVE-2021-39648 https://bugzilla.suse.com/1193861 SUSE Bug 1193861 In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-194696049References: Upstream kernel CVE-2021-39657 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-39657.html CVE-2021-39657 https://bugzilla.suse.com/1193864 SUSE Bug 1193864 A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data. CVE-2021-4002 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-4002.html CVE-2021-4002 https://bugzilla.suse.com/1192946 SUSE Bug 1192946 https://bugzilla.suse.com/1192973 SUSE Bug 1192973 A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4. CVE-2021-4083 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-4083.html CVE-2021-4083 https://bugzilla.suse.com/1193727 SUSE Bug 1193727 https://bugzilla.suse.com/1194460 SUSE Bug 1194460 https://bugzilla.suse.com/1196722 SUSE Bug 1196722 A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem. CVE-2021-4149 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-4149.html CVE-2021-4149 https://bugzilla.suse.com/1194001 SUSE Bug 1194001 A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them. CVE-2021-4155 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-4155.html CVE-2021-4155 https://bugzilla.suse.com/1194272 SUSE Bug 1194272 https://bugzilla.suse.com/1199255 SUSE Bug 1199255 https://bugzilla.suse.com/1200084 SUSE Bug 1200084 An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system. CVE-2021-4197 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-4197.html CVE-2021-4197 https://bugzilla.suse.com/1194302 SUSE Bug 1194302 A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem. CVE-2021-4202 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-4202.html CVE-2021-4202 https://bugzilla.suse.com/1194529 SUSE Bug 1194529 https://bugzilla.suse.com/1194533 SUSE Bug 1194533 In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic). CVE-2021-43976 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-43976.html CVE-2021-43976 https://bugzilla.suse.com/1192847 SUSE Bug 1192847 pep_sock_accept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak. CVE-2021-45095 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-45095.html CVE-2021-45095 https://bugzilla.suse.com/1193867 SUSE Bug 1193867 In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses. CVE-2021-45485 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-45485.html CVE-2021-45485 https://bugzilla.suse.com/1194094 SUSE Bug 1194094 In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small. CVE-2021-45486 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2021-45486.html CVE-2021-45486 https://bugzilla.suse.com/1194087 SUSE Bug 1194087 A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system. CVE-2022-0330 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.164.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.164.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220477-1/ https://www.suse.com/security/cve/CVE-2022-0330.html CVE-2022-0330 https://bugzilla.suse.com/1194880 SUSE Bug 1194880 https://bugzilla.suse.com/1195950 SUSE Bug 1195950