Security update for the Linux RT Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:0544-1 Final 1 1 2022-02-21T12:51:44Z current 2022-02-21T12:51:44Z 2022-02-21T12:51:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux RT Kernel The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). - CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bnc#1193867). - CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065). - CVE-2021-22600: Fixed double free bug in packet_set_ring() in net/packet/af_packet.c that could have been exploited by a local user through crafted syscalls to escalate privileges or deny service (bnc#1195184). - CVE-2021-39657: Fixed out of bounds read due to a missing bounds check in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local information disclosure with System execution privileges needed (bnc#1193864). - CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a race condition in gadget_dev_desc_UDC_show of configfs.c. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1193861). - CVE-2022-0330: Fixed flush TLBs before releasing backing store (bsc#1194880). The following non-security bugs were fixed: - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() (bsc#1194227). - btrfs: tree-checker: Add EXTENT_ITEM and METADATA_ITEM check (bsc#1195009). - btrfs: tree-checker: annotate all error branches as unlikely (bsc#1195009). - btrfs: tree-checker: check for BTRFS_BLOCK_FLAG_FULL_BACKREF being set improperly (bsc#1195009). - hv_netvsc: Set needed_headroom according to VF (bsc#1193506). - net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506). - net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506). - net: allow retransmitting a TCP packet if original is still in queue (bsc#1188605 bsc#1187428). - net: mana: Add RX fencing (bsc#1193506). - net: mana: Add XDP support (bsc#1193506). - net: sch_generic: aviod concurrent reset and enqueue op for lockless qdisc (bsc#1183405). - net: sched: add barrier to ensure correct ordering for lockless qdisc (bsc#1183405). - net: sched: avoid unnecessary seqcount operation for lockless qdisc (bsc#1183405). - net: sched: fix packet stuck problem for lockless qdisc (bsc#1183405). - net: sched: fix tx action reschedule issue with stopped queue (bsc#1183405). - net: sched: fix tx action rescheduling issue during deactivation (bsc#1183405). - net: sched: replaced invalid qdisc tree flush helper in qdisc_replace (bsc#1183405). - net_sched: avoid resetting active qdisc for multiple times (bsc#1183405). - net_sched: get rid of unnecessary dev_qdisc_reset() (bsc#1183405). - net_sched: use qdisc_reset() in qdisc_destroy() (bsc#1183405). - nvme: add 'iopolicy' module parameter (bsc#1177599 bsc#1193096). - xfrm: fix MTU regression (bsc#1185377, bsc#1194048). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-544,SUSE-SLE-Module-RT-15-SP2-2022-544,SUSE-SUSE-MicroOS-5.0-2022-544 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20220544-1/ Link for SUSE-SU-2022:0544-1 https://lists.suse.com/pipermail/sle-security-updates/2022-February/010284.html E-Mail link for SUSE-SU-2022:0544-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1177599 SUSE Bug 1177599 https://bugzilla.suse.com/1183405 SUSE Bug 1183405 https://bugzilla.suse.com/1185377 SUSE Bug 1185377 https://bugzilla.suse.com/1187428 SUSE Bug 1187428 https://bugzilla.suse.com/1188605 SUSE Bug 1188605 https://bugzilla.suse.com/1193096 SUSE Bug 1193096 https://bugzilla.suse.com/1193506 SUSE Bug 1193506 https://bugzilla.suse.com/1193861 SUSE Bug 1193861 https://bugzilla.suse.com/1193864 SUSE Bug 1193864 https://bugzilla.suse.com/1193867 SUSE Bug 1193867 https://bugzilla.suse.com/1194048 SUSE Bug 1194048 https://bugzilla.suse.com/1194227 SUSE Bug 1194227 https://bugzilla.suse.com/1194880 SUSE Bug 1194880 https://bugzilla.suse.com/1195009 SUSE Bug 1195009 https://bugzilla.suse.com/1195065 SUSE Bug 1195065 https://bugzilla.suse.com/1195184 SUSE Bug 1195184 https://bugzilla.suse.com/1195254 SUSE Bug 1195254 https://www.suse.com/security/cve/CVE-2021-22600/ SUSE CVE CVE-2021-22600 page https://www.suse.com/security/cve/CVE-2021-39648/ SUSE CVE CVE-2021-39648 page https://www.suse.com/security/cve/CVE-2021-39657/ SUSE CVE CVE-2021-39657 page https://www.suse.com/security/cve/CVE-2021-45095/ SUSE CVE CVE-2021-45095 page https://www.suse.com/security/cve/CVE-2022-0330/ SUSE CVE CVE-2022-0330 page https://www.suse.com/security/cve/CVE-2022-22942/ SUSE CVE CVE-2022-22942 page SUSE Linux Enterprise Micro 5.0 SUSE Real Time Module 15 SP2 cluster-md-kmp-rt-5.3.18-73.1 cluster-md-kmp-rt_debug-5.3.18-73.1 dlm-kmp-rt-5.3.18-73.1 dlm-kmp-rt_debug-5.3.18-73.1 gfs2-kmp-rt-5.3.18-73.1 gfs2-kmp-rt_debug-5.3.18-73.1 kernel-devel-rt-5.3.18-73.1 kernel-rt-5.3.18-73.1 kernel-rt-devel-5.3.18-73.1 kernel-rt-extra-5.3.18-73.1 kernel-rt-livepatch-devel-5.3.18-73.1 kernel-rt_debug-5.3.18-73.1 kernel-rt_debug-devel-5.3.18-73.1 kernel-rt_debug-extra-5.3.18-73.1 kernel-rt_debug-livepatch-devel-5.3.18-73.1 kernel-source-rt-5.3.18-73.1 kernel-syms-rt-5.3.18-73.1 kselftests-kmp-rt-5.3.18-73.1 kselftests-kmp-rt_debug-5.3.18-73.1 ocfs2-kmp-rt-5.3.18-73.1 ocfs2-kmp-rt_debug-5.3.18-73.1 reiserfs-kmp-rt-5.3.18-73.1 reiserfs-kmp-rt_debug-5.3.18-73.1 kernel-rt-5.3.18-73.1 as a component of SUSE Linux Enterprise Micro 5.0 cluster-md-kmp-rt-5.3.18-73.1 as a component of SUSE Real Time Module 15 SP2 dlm-kmp-rt-5.3.18-73.1 as a component of SUSE Real Time Module 15 SP2 gfs2-kmp-rt-5.3.18-73.1 as a component of SUSE Real Time Module 15 SP2 kernel-devel-rt-5.3.18-73.1 as a component of SUSE Real Time Module 15 SP2 kernel-rt-5.3.18-73.1 as a component of SUSE Real Time Module 15 SP2 kernel-rt-devel-5.3.18-73.1 as a component of SUSE Real Time Module 15 SP2 kernel-rt_debug-5.3.18-73.1 as a component of SUSE Real Time Module 15 SP2 kernel-rt_debug-devel-5.3.18-73.1 as a component of SUSE Real Time Module 15 SP2 kernel-source-rt-5.3.18-73.1 as a component of SUSE Real Time Module 15 SP2 kernel-syms-rt-5.3.18-73.1 as a component of SUSE Real Time Module 15 SP2 ocfs2-kmp-rt-5.3.18-73.1 as a component of SUSE Real Time Module 15 SP2 A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755 CVE-2021-22600 SUSE Linux Enterprise Micro 5.0:kernel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:cluster-md-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:dlm-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:gfs2-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-devel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt-devel-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt_debug-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt_debug-devel-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-source-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-syms-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:ocfs2-kmp-rt-5.3.18-73.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220544-1/ https://www.suse.com/security/cve/CVE-2021-22600.html CVE-2021-22600 https://bugzilla.suse.com/1195184 SUSE Bug 1195184 https://bugzilla.suse.com/1195307 SUSE Bug 1195307 In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-160822094References: Upstream kernel CVE-2021-39648 SUSE Linux Enterprise Micro 5.0:kernel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:cluster-md-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:dlm-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:gfs2-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-devel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt-devel-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt_debug-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt_debug-devel-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-source-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-syms-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:ocfs2-kmp-rt-5.3.18-73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220544-1/ https://www.suse.com/security/cve/CVE-2021-39648.html CVE-2021-39648 https://bugzilla.suse.com/1193861 SUSE Bug 1193861 In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-194696049References: Upstream kernel CVE-2021-39657 SUSE Linux Enterprise Micro 5.0:kernel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:cluster-md-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:dlm-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:gfs2-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-devel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt-devel-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt_debug-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt_debug-devel-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-source-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-syms-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:ocfs2-kmp-rt-5.3.18-73.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220544-1/ https://www.suse.com/security/cve/CVE-2021-39657.html CVE-2021-39657 https://bugzilla.suse.com/1193864 SUSE Bug 1193864 pep_sock_accept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak. CVE-2021-45095 SUSE Linux Enterprise Micro 5.0:kernel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:cluster-md-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:dlm-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:gfs2-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-devel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt-devel-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt_debug-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt_debug-devel-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-source-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-syms-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:ocfs2-kmp-rt-5.3.18-73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220544-1/ https://www.suse.com/security/cve/CVE-2021-45095.html CVE-2021-45095 https://bugzilla.suse.com/1193867 SUSE Bug 1193867 A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system. CVE-2022-0330 SUSE Linux Enterprise Micro 5.0:kernel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:cluster-md-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:dlm-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:gfs2-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-devel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt-devel-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt_debug-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt_debug-devel-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-source-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-syms-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:ocfs2-kmp-rt-5.3.18-73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220544-1/ https://www.suse.com/security/cve/CVE-2022-0330.html CVE-2022-0330 https://bugzilla.suse.com/1194880 SUSE Bug 1194880 https://bugzilla.suse.com/1195950 SUSE Bug 1195950 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. CVE-2022-22942 SUSE Linux Enterprise Micro 5.0:kernel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:cluster-md-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:dlm-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:gfs2-kmp-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-devel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt-devel-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt_debug-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-rt_debug-devel-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-source-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:kernel-syms-rt-5.3.18-73.1 SUSE Real Time Module 15 SP2:ocfs2-kmp-rt-5.3.18-73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220544-1/ https://www.suse.com/security/cve/CVE-2022-22942.html CVE-2022-22942 https://bugzilla.suse.com/1195065 SUSE Bug 1195065 https://bugzilla.suse.com/1195951 SUSE Bug 1195951