Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2478-1 Final 1 1 2022-07-21T09:20:18Z current 2022-07-21T09:20:18Z 2022-07-21T09:20:18Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657). - CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487). - CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619). - CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692) - CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604). - CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013). - CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050). - CVE-2017-16525: Fixed a use-after-free after failed setup in usb/serial/console (bsc#1066618). The following non-security bugs were fixed: - exec: Force single empty string when argv is empty (bsc#1200571). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-2478,SUSE-SLE-SERVER-12-SP3-BCL-2022-2478 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222478-1/ Link for SUSE-SU-2022:2478-1 https://lists.suse.com/pipermail/sle-security-updates/2022-July/011611.html E-Mail link for SUSE-SU-2022:2478-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1066618 SUSE Bug 1066618 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 https://bugzilla.suse.com/1194013 SUSE Bug 1194013 https://bugzilla.suse.com/1196901 SUSE Bug 1196901 https://bugzilla.suse.com/1199487 SUSE Bug 1199487 https://bugzilla.suse.com/1199657 SUSE Bug 1199657 https://bugzilla.suse.com/1200571 SUSE Bug 1200571 https://bugzilla.suse.com/1200604 SUSE Bug 1200604 https://bugzilla.suse.com/1200605 SUSE Bug 1200605 https://bugzilla.suse.com/1200619 SUSE Bug 1200619 https://bugzilla.suse.com/1200692 SUSE Bug 1200692 https://bugzilla.suse.com/1201050 SUSE Bug 1201050 https://bugzilla.suse.com/1201080 SUSE Bug 1201080 https://www.suse.com/security/cve/CVE-2017-16525/ SUSE CVE CVE-2017-16525 page https://www.suse.com/security/cve/CVE-2021-26341/ SUSE CVE CVE-2021-26341 page https://www.suse.com/security/cve/CVE-2021-4157/ SUSE CVE CVE-2021-4157 page https://www.suse.com/security/cve/CVE-2022-1679/ SUSE CVE CVE-2022-1679 page https://www.suse.com/security/cve/CVE-2022-20132/ SUSE CVE CVE-2022-20132 page https://www.suse.com/security/cve/CVE-2022-20141/ SUSE CVE CVE-2022-20141 page https://www.suse.com/security/cve/CVE-2022-29900/ SUSE CVE CVE-2022-29900 page https://www.suse.com/security/cve/CVE-2022-29901/ SUSE CVE CVE-2022-29901 page https://www.suse.com/security/cve/CVE-2022-33981/ SUSE CVE CVE-2022-33981 page SUSE Linux Enterprise Server 12 SP3-BCL cluster-md-kmp-debug-4.4.180-94.167.1 cluster-md-kmp-default-4.4.180-94.167.1 dlm-kmp-debug-4.4.180-94.167.1 dlm-kmp-default-4.4.180-94.167.1 gfs2-kmp-debug-4.4.180-94.167.1 gfs2-kmp-default-4.4.180-94.167.1 kernel-debug-4.4.180-94.167.1 kernel-debug-base-4.4.180-94.167.1 kernel-debug-devel-4.4.180-94.167.1 kernel-debug-extra-4.4.180-94.167.1 kernel-debug-kgraft-4.4.180-94.167.1 kernel-default-4.4.180-94.167.1 kernel-default-base-4.4.180-94.167.1 kernel-default-devel-4.4.180-94.167.1 kernel-default-extra-4.4.180-94.167.1 kernel-default-kgraft-4.4.180-94.167.1 kernel-default-man-4.4.180-94.167.1 kernel-devel-4.4.180-94.167.1 kernel-docs-4.4.180-94.167.1 kernel-docs-html-4.4.180-94.167.1 kernel-docs-pdf-4.4.180-94.167.1 kernel-macros-4.4.180-94.167.1 kernel-obs-build-4.4.180-94.167.1 kernel-obs-qa-4.4.180-94.167.1 kernel-source-4.4.180-94.167.1 kernel-source-vanilla-4.4.180-94.167.1 kernel-syms-4.4.180-94.167.1 kernel-vanilla-4.4.180-94.167.1 kernel-vanilla-base-4.4.180-94.167.1 kernel-vanilla-devel-4.4.180-94.167.1 kernel-zfcpdump-4.4.180-94.167.1 kselftests-kmp-debug-4.4.180-94.167.1 kselftests-kmp-default-4.4.180-94.167.1 ocfs2-kmp-debug-4.4.180-94.167.1 ocfs2-kmp-default-4.4.180-94.167.1 kernel-default-4.4.180-94.167.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL kernel-default-base-4.4.180-94.167.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL kernel-default-devel-4.4.180-94.167.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL kernel-devel-4.4.180-94.167.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL kernel-macros-4.4.180-94.167.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL kernel-source-4.4.180-94.167.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL kernel-syms-4.4.180-94.167.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup. CVE-2017-16525 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.167.1 moderate 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222478-1/ https://www.suse.com/security/cve/CVE-2017-16525.html CVE-2017-16525 https://bugzilla.suse.com/1066618 SUSE Bug 1066618 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage. CVE-2021-26341 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.167.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222478-1/ https://www.suse.com/security/cve/CVE-2021-26341.html CVE-2021-26341 https://bugzilla.suse.com/1196901 SUSE Bug 1196901 https://bugzilla.suse.com/1201050 SUSE Bug 1201050 An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS). A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system. CVE-2021-4157 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.167.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222478-1/ https://www.suse.com/security/cve/CVE-2021-4157.html CVE-2021-4157 https://bugzilla.suse.com/1194013 SUSE Bug 1194013 A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2022-1679 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.167.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222478-1/ https://www.suse.com/security/cve/CVE-2022-1679.html CVE-2022-1679 https://bugzilla.suse.com/1199487 SUSE Bug 1199487 https://bugzilla.suse.com/1201080 SUSE Bug 1201080 https://bugzilla.suse.com/1201832 SUSE Bug 1201832 https://bugzilla.suse.com/1204132 SUSE Bug 1204132 https://bugzilla.suse.com/1212316 SUSE Bug 1212316 In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel CVE-2022-20132 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.167.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222478-1/ https://www.suse.com/security/cve/CVE-2022-20132.html CVE-2022-20132 https://bugzilla.suse.com/1200619 SUSE Bug 1200619 https://bugzilla.suse.com/1212287 SUSE Bug 1212287 In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112551163References: Upstream kernel CVE-2022-20141 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.167.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222478-1/ https://www.suse.com/security/cve/CVE-2022-20141.html CVE-2022-20141 https://bugzilla.suse.com/1200604 SUSE Bug 1200604 https://bugzilla.suse.com/1200605 SUSE Bug 1200605 https://bugzilla.suse.com/1203034 SUSE Bug 1203034 Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions. CVE-2022-29900 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.167.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222478-1/ https://www.suse.com/security/cve/CVE-2022-29900.html CVE-2022-29900 https://bugzilla.suse.com/1199657 SUSE Bug 1199657 https://bugzilla.suse.com/1201469 SUSE Bug 1201469 https://bugzilla.suse.com/1207894 SUSE Bug 1207894 Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions. CVE-2022-29901 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.167.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222478-1/ https://www.suse.com/security/cve/CVE-2022-29901.html CVE-2022-29901 https://bugzilla.suse.com/1201469 SUSE Bug 1201469 https://bugzilla.suse.com/1207894 SUSE Bug 1207894 drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function. CVE-2022-33981 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.167.1 SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.167.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222478-1/ https://www.suse.com/security/cve/CVE-2022-33981.html CVE-2022-33981 https://bugzilla.suse.com/1200692 SUSE Bug 1200692