Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4) SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2268-1 Final 1 1 2022-07-05T13:03:46Z current 2022-07-05T13:03:46Z 2022-07-05T13:03:46Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4) This update for the Linux Kernel 5.14.21-150400_22 fixes several issues. The following security issues were fixed: - CVE-2022-32250: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a privilege escalation issue. (bnc#1200015) - CVE-2022-1972: Fixed a buffer overflow in nftable that could lead to privilege escalation. (bsc#1200019) - CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505). - CVE-2022-1280: Fixed a use-after-free vulnerability in drm_lease_held in drivers/gpu/drm/drm_lease.c (bnc#1197914). - CVE-2022-1280: Fixed a use-after-free vulnerability in drm_lease_held in drivers/gpu/drm/drm_lease.c (bnc#1197914). - CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197227) - CVE-2021-39698: Fixed a possible memory corruption due to a use after free in aio_poll_complete_work. This could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1196956) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-2268,SUSE-SLE-Module-Live-Patching-15-SP4-2022-2268 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222268-1/ Link for SUSE-SU-2022:2268-1 https://lists.suse.com/pipermail/sle-security-updates/2022-July/011401.html E-Mail link for SUSE-SU-2022:2268-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1196959 SUSE Bug 1196959 https://bugzilla.suse.com/1197335 SUSE Bug 1197335 https://bugzilla.suse.com/1198590 SUSE Bug 1198590 https://bugzilla.suse.com/1199602 SUSE Bug 1199602 https://bugzilla.suse.com/1200266 SUSE Bug 1200266 https://bugzilla.suse.com/1200268 SUSE Bug 1200268 https://www.suse.com/security/cve/CVE-2021-39698/ SUSE CVE CVE-2021-39698 page https://www.suse.com/security/cve/CVE-2022-1016/ SUSE CVE CVE-2022-1016 page https://www.suse.com/security/cve/CVE-2022-1280/ SUSE CVE CVE-2022-1280 page https://www.suse.com/security/cve/CVE-2022-1966/ SUSE CVE CVE-2022-1966 page https://www.suse.com/security/cve/CVE-2022-1972/ SUSE CVE CVE-2022-1972 page https://www.suse.com/security/cve/CVE-2022-30594/ SUSE CVE CVE-2022-30594 page https://www.suse.com/security/cve/CVE-2022-32250/ SUSE CVE CVE-2022-32250 page SUSE Linux Enterprise Live Patching 15 SP4 kernel-livepatch-5_14_21-150400_22-default-2-150400.4.3.3 kernel-livepatch-5_14_21-150400_22-default-2-150400.4.3.3 as a component of SUSE Linux Enterprise Live Patching 15 SP4 In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-185125206References: Upstream kernel CVE-2021-39698 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-2-150400.4.3.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222268-1/ https://www.suse.com/security/cve/CVE-2021-39698.html CVE-2021-39698 https://bugzilla.suse.com/1196956 SUSE Bug 1196956 https://bugzilla.suse.com/1196959 SUSE Bug 1196959 https://bugzilla.suse.com/1209225 SUSE Bug 1209225 A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker. CVE-2022-1016 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-2-150400.4.3.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222268-1/ https://www.suse.com/security/cve/CVE-2022-1016.html CVE-2022-1016 https://bugzilla.suse.com/1197335 SUSE Bug 1197335 A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service (DoS) or a kernel information leak. CVE-2022-1280 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-2-150400.4.3.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222268-1/ https://www.suse.com/security/cve/CVE-2022-1280.html CVE-2022-1280 https://bugzilla.suse.com/1197914 SUSE Bug 1197914 https://bugzilla.suse.com/1198590 SUSE Bug 1198590 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. CVE-2022-1966 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-2-150400.4.3.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222268-1/ https://www.suse.com/security/cve/CVE-2022-1966.html CVE-2022-1966 https://bugzilla.suse.com/1200015 SUSE Bug 1200015 https://bugzilla.suse.com/1200268 SUSE Bug 1200268 https://bugzilla.suse.com/1200494 SUSE Bug 1200494 https://bugzilla.suse.com/1200529 SUSE Bug 1200529 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2078. Reason: This candidate is a reservation duplicate of CVE-2022-2078. Notes: All CVE users should reference CVE-2022-2078 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. CVE-2022-1972 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-2-150400.4.3.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222268-1/ https://www.suse.com/security/cve/CVE-2022-1972.html CVE-2022-1972 https://bugzilla.suse.com/1200019 SUSE Bug 1200019 https://bugzilla.suse.com/1200266 SUSE Bug 1200266 The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag. CVE-2022-30594 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-2-150400.4.3.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222268-1/ https://www.suse.com/security/cve/CVE-2022-30594.html CVE-2022-30594 https://bugzilla.suse.com/1199505 SUSE Bug 1199505 https://bugzilla.suse.com/1199602 SUSE Bug 1199602 https://bugzilla.suse.com/1201549 SUSE Bug 1201549 https://bugzilla.suse.com/1204132 SUSE Bug 1204132 net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free. CVE-2022-32250 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-2-150400.4.3.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222268-1/ https://www.suse.com/security/cve/CVE-2022-32250.html CVE-2022-32250 https://bugzilla.suse.com/1200015 SUSE Bug 1200015 https://bugzilla.suse.com/1200268 SUSE Bug 1200268 https://bugzilla.suse.com/1200494 SUSE Bug 1200494 https://bugzilla.suse.com/1202992 SUSE Bug 1202992 https://bugzilla.suse.com/1202993 SUSE Bug 1202993 https://bugzilla.suse.com/1203002 SUSE Bug 1203002