Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4) SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2854-1 Final 1 1 2022-08-19T14:04:39Z current 2022-08-19T14:04:39Z 2022-08-19T14:04:39Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4) This update for the Linux Kernel 5.14.21-150400_22 fixes several issues. The following security issues were fixed: - CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel. (bnc#1198033) - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could crash the system or corrupt the system memory. (bsc#1196830) - CVE-2022-33743: Fixed a Denial of Service related to XDP (bsc#1200763). - CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031). - CVE-2022-34918: Fixed a buffer overflow with nft_set_elem_init() that could be used by a local attacker to escalate privileges (bnc#1201171). - CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487). - CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-2854,SUSE-SLE-Module-Live-Patching-15-SP4-2022-2854 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222854-1/ Link for SUSE-SU-2022:2854-1 https://lists.suse.com/pipermail/sle-security-updates/2022-August/011950.html E-Mail link for SUSE-SU-2022:2854-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1199606 SUSE Bug 1199606 https://bugzilla.suse.com/1201080 SUSE Bug 1201080 https://bugzilla.suse.com/1201222 SUSE Bug 1201222 https://bugzilla.suse.com/1201517 SUSE Bug 1201517 https://bugzilla.suse.com/1201629 SUSE Bug 1201629 https://bugzilla.suse.com/1201656 SUSE Bug 1201656 https://bugzilla.suse.com/1201657 SUSE Bug 1201657 https://www.suse.com/security/cve/CVE-2022-1679/ SUSE CVE CVE-2022-1679 page https://www.suse.com/security/cve/CVE-2022-1734/ SUSE CVE CVE-2022-1734 page https://www.suse.com/security/cve/CVE-2022-26490/ SUSE CVE CVE-2022-26490 page https://www.suse.com/security/cve/CVE-2022-28389/ SUSE CVE CVE-2022-28389 page https://www.suse.com/security/cve/CVE-2022-28390/ SUSE CVE CVE-2022-28390 page https://www.suse.com/security/cve/CVE-2022-33743/ SUSE CVE CVE-2022-33743 page https://www.suse.com/security/cve/CVE-2022-34918/ SUSE CVE CVE-2022-34918 page SUSE Linux Enterprise Live Patching 15 SP4 kernel-livepatch-5_14_21-150400_22-default-4-150400.4.9.3 kernel-livepatch-5_14_21-150400_22-default-4-150400.4.9.3 as a component of SUSE Linux Enterprise Live Patching 15 SP4 A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2022-1679 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-4-150400.4.9.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222854-1/ https://www.suse.com/security/cve/CVE-2022-1679.html CVE-2022-1679 https://bugzilla.suse.com/1199487 SUSE Bug 1199487 https://bugzilla.suse.com/1201080 SUSE Bug 1201080 https://bugzilla.suse.com/1201832 SUSE Bug 1201832 https://bugzilla.suse.com/1204132 SUSE Bug 1204132 https://bugzilla.suse.com/1212316 SUSE Bug 1212316 A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine. CVE-2022-1734 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-4-150400.4.9.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222854-1/ https://www.suse.com/security/cve/CVE-2022-1734.html CVE-2022-1734 https://bugzilla.suse.com/1199605 SUSE Bug 1199605 https://bugzilla.suse.com/1199606 SUSE Bug 1199606 https://bugzilla.suse.com/1201832 SUSE Bug 1201832 st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters. CVE-2022-26490 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-4-150400.4.9.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222854-1/ https://www.suse.com/security/cve/CVE-2022-26490.html CVE-2022-26490 https://bugzilla.suse.com/1196830 SUSE Bug 1196830 https://bugzilla.suse.com/1201656 SUSE Bug 1201656 https://bugzilla.suse.com/1201969 SUSE Bug 1201969 https://bugzilla.suse.com/1211495 SUSE Bug 1211495 mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free. CVE-2022-28389 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-4-150400.4.9.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222854-1/ https://www.suse.com/security/cve/CVE-2022-28389.html CVE-2022-28389 https://bugzilla.suse.com/1198033 SUSE Bug 1198033 https://bugzilla.suse.com/1201657 SUSE Bug 1201657 ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free. CVE-2022-28390 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-4-150400.4.9.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222854-1/ https://www.suse.com/security/cve/CVE-2022-28390.html CVE-2022-28390 https://bugzilla.suse.com/1198031 SUSE Bug 1198031 https://bugzilla.suse.com/1201517 SUSE Bug 1201517 https://bugzilla.suse.com/1207969 SUSE Bug 1207969 network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP (eXpress Data Path), a code label was moved in a way allowing for SKBs having references (pointers) retained for further processing to nevertheless be freed. CVE-2022-33743 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-4-150400.4.9.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222854-1/ https://www.suse.com/security/cve/CVE-2022-33743.html CVE-2022-33743 https://bugzilla.suse.com/1200763 SUSE Bug 1200763 https://bugzilla.suse.com/1201629 SUSE Bug 1201629 An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c. CVE-2022-34918 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_22-default-4-150400.4.9.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222854-1/ https://www.suse.com/security/cve/CVE-2022-34918.html CVE-2022-34918 https://bugzilla.suse.com/1201171 SUSE Bug 1201171 https://bugzilla.suse.com/1201177 SUSE Bug 1201177 https://bugzilla.suse.com/1201222 SUSE Bug 1201222