File _patchinfo of Package patchinfo.24574

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.24574

<patchinfo incident="24574">
  <issue id="1028340" tracker="bnc">BUG at ../drivers/scsi/device_handler/scsi_dh_alua.c:659 in SAS fail/unfail test</issue>
  <issue id="1055710" tracker="bnc">VUL-1: CVE-2017-13695: kernel-source:  ACPI operand cache leak in nseval.c</issue>
  <issue id="1071995" tracker="bnc">[TRACKERBUG] SLE15 livepatch backports</issue>
  <issue id="1087082" tracker="bnc">VUL-0: CVE-2018-3639:  V4 - Speculative Store Bypass aka "Memory Disambiguation"</issue>
  <issue id="1114648" tracker="bnc">[TRACKERBUG] git-fixes pile for SLE12</issue>
  <issue id="1158266" tracker="bnc">VUL-0: CVE-2019-19377: kernel-source: mounting a crafted btrfs filesystem image can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c</issue>
  <issue id="1172456" tracker="bnc">VUL-1: CVE-2019-20811: kernel-source:  reference count is mishandled rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c</issue>
  <issue id="1183723" tracker="bnc">VUL-1: CVE-2021-20292: kernel-source-azure,kernel-source-rt,kernel-source: DRM Memory Management Double Free Privilege Escalation Vulnerability</issue>
  <issue id="1187055" tracker="bnc">VUL-0: CVE-2021-38208: kernel-source,kernel-source-rt,kernel-soure-azure: nfc: Null pointer dereference in llcp_sock_getname</issue>
  <issue id="1191647" tracker="bnc">VUL-0: CVE-2021-20321: kernel-source,kernel-source-rt,kernel-source-azure: kernel: In Overlayfs missing a check for a negative dentry before calling vfs_rename()</issue>
  <issue id="1191958" tracker="bnc">VUL-0: CVE-2021-43389: kernel-source,kernel-source-azure,kernel-source-rt: an array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c</issue>
  <issue id="1195651" tracker="bnc">net: mana: Add handling of CQE_RX_TRUNCATED</issue>
  <issue id="1196367" tracker="bnc">swapon process occasionally blocks - Need core analyzed</issue>
  <issue id="1196426" tracker="bnc">VUL-0: CVE-2021-33061: kernel-source-azure,kernel-source-rt,kernel-source: Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters results in denial of service</issue>
  <issue id="1197219" tracker="bnc">VUL-0: CVE-2021-39711: kernel-source-rt,kernel-source-azure,kernel-source: out of bounds read bpf_prog_test_run_skb</issue>
  <issue id="1197343" tracker="bnc">VUL-0: CVE-2022-1011: kernel-source-azure,kernel-source-rt,kernel-source: FUSE allows UAF reads of write() buffers, allowing theft of (partial) /etc/shadow hashes</issue>
  <issue id="1198400" tracker="bnc">VUL-0: kernel: save/restore speculative MSRs during S3 suspend/resume</issue>
  <issue id="1198516" tracker="bnc">VUL-0: CVE-2022-1353: kernel-source: information leak issue in pfkey_register in net/key/af_key.c</issue>
  <issue id="1198577" tracker="bnc">VUL-0: CVE-2022-1184: kernel: use-after-free and memory errors in ext4 when mounting and operating on a corrupted image</issue>
  <issue id="1198687" tracker="bnc">[EAR - NOT FOR USA Citizens] PTF requests fo kernel fixing CVE-2022-1011 in SLES11 SP3 LTSS– Core</issue>
  <issue id="1198742" tracker="bnc">VUL-0: CVE-2022-1419: kernel: A concurrency use-after-free in vgem_gem_dumb_create</issue>
  <issue id="1198776" tracker="bnc">Backport ENA driver for SLE 15 kernel</issue>
  <issue id="1198825" tracker="bnc">L3: kernel BUG at ../drivers/scsi/device_handler/scsi_dh_alua.c:668 - ref:_00D1igLOd._5005q4TbAL:ref</issue>
  <issue id="1199012" tracker="bnc">VUL-0: CVE-2022-1516: kernel-source-rt,kernel-source,kernel-source-azure: null-ptr-deref caused by x25_disconnect</issue>
  <issue id="1199063" tracker="bnc">VUL-0: CVE-2022-1652: kernel-source,kernel-source-rt,kernel-source-azure: We found a concurrency use-after-free in bad_flp_intr for latest kernel version</issue>
  <issue id="1199314" tracker="bnc">[Azure] PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time</issue>
  <issue id="1199399" tracker="bnc">L3: PBI000000424979 - lpsbxenpwa2021 /20 crash. Crash when mounting f/s - Need core analyzed</issue>
  <issue id="1199426" tracker="bnc">VUL-0: CVE-2022-21499: kernel-source,kernel-source-rt,kernel-source-azure: break out of lockdown with kgdb</issue>
  <issue id="1199507" tracker="bnc">VUL-0: CVE-2022-1729: kernel-source: kernel/core: race condition in perf_event_open leads to privilege escalation</issue>
  <issue id="1199605" tracker="bnc">VUL-0: CVE-2022-1734: kernel-source,kernel-source-azure,kernel-source-rt: Use-After-Free in NFC driver in nfcmrvl_nci_unregister_dev when simulating NFC device from user-space</issue>
  <issue id="1199650" tracker="bnc">VUL-0: EMBARGOED: CVE-2022-21166, CVE-2022-21127, CVE-2022-21123, CVE-2022-21125, CVE-2022-21180: kernel: stale MMIO data transient information leaks (INTEL-TA-00615)</issue>
  <issue id="1200143" tracker="bnc">VUL-0: CVE-2022-1975: kernel-source,kernel-source-azure,kernel-source-rt: sleep in atomic bug when firmware download timeout</issue>
  <issue id="1200144" tracker="bnc">VUL-0: CVE-2022-1974: kernel-source-rt,kernel-source,kernel-source-azure: use-after-free in /net/nfc/core.c causes kernel crash by simulating nfc device from user-space</issue>
  <issue id="1200249" tracker="bnc">SLE15-SP3/armv7l/lpae: NEW WARNINGS (4c788136)</issue>
  <issue id="1199505" tracker="bnc">VUL-0: CVE-2022-30594: kernel-source,kernel-source-azure,kernel-source-rt: mishandled seccomp permissions</issue>
  <issue id="2022-1975" tracker="cve" />
  <issue id="2022-1974" tracker="cve" />
  <issue id="2022-21166" tracker="cve" />
  <issue id="2022-21127" tracker="cve" />
  <issue id="2022-21123" tracker="cve" />
  <issue id="2022-21125" tracker="cve" />
  <issue id="2022-21180" tracker="cve" />
  <issue id="2019-19377" tracker="cve" />
  <issue id="2022-1729" tracker="cve" />
  <issue id="2022-1184" tracker="cve" />
  <issue id="2022-21499" tracker="cve" />
  <issue id="2017-13695" tracker="cve" />
  <issue id="2022-1652" tracker="cve" />
  <issue id="2022-1734" tracker="cve" />
  <issue id="2021-39711" tracker="cve" />
  <issue id="2022-30594" tracker="cve" />
  <issue id="2021-33061" tracker="cve" />
  <issue id="2022-1516" tracker="cve" />
  <issue id="2021-20321" tracker="cve" />
  <issue id="2019-20811" tracker="cve" />
  <issue id="2022-1419" tracker="cve" />
  <issue id="2021-43389" tracker="cve" />
  <issue id="2021-38208" tracker="cve" />
  <issue id="2022-1353" tracker="cve" />
  <issue id="2021-20292" tracker="cve" />
  <issue id="2022-1011" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>tabraham1</packager>
  <reboot_needed/>
  <description>
The SUSE Linux Enterprise 15 kernel was updated.

The following security bugs were fixed:

- CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266)
- CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577)
- CVE-2017-13695: Fixed a bug that caused a stack dump allowing local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table. (bnc#1055710)
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
- CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
- CVE-2021-39711: In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1197219).
- CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
- CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c. (bnc#1191958)
- CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call (bnc#1187055).
- CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c. (bnc#1198516)
- CVE-2021-20292: Fixed object validation prior to performing operations on the object in nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bnc#1197343)
- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144)
- CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device from user-space. (bsc#1200143)
- CVE-2022-21499: Reinforce the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb. (bsc#1199426)
- CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605)
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
- CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426).
- CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
- CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system (bnc#1191647).
- CVE-2019-20811: Fixed issue in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, where a reference count is mishandled (bnc#1172456).

The following non-security bugs were fixed:

- btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (bsc#1199399).
- btrfs: tree-checker: fix incorrect printk format (bsc#1200249).
- lib: dimlib: fix help text typos (bsc#1198776).
- lib: dimlib: make DIMLIB a hidden symbol (bsc#1198776).
- linux/dim: Add completions count to dim_sample (bsc#1198776).
- linux/dim: Fix -Wunused-const-variable warnings (bsc#1198776).
- linux/dim: Fix overflow in dim calculation (bsc#1198776).
- linux/dim: Implement RDMA adaptive moderation (DIM) (bsc#1198776).
- linux/dim: Move implementation to .c files (bsc#1198776).
- linux/dim: Move logic to dim.h (bsc#1198776).
- linux/dim: Remove "net" prefix from internal DIM members (bsc#1198776).
- linux/dim: Rename externally exposed macros (bsc#1198776).
- linux/dim: Rename externally used net_dim members (bsc#1198776).
- linux/dim: Rename net_dim_sample() to net_dim_update_sample() (bsc#1198776).
- net: ena: A typo fix in the file ena_com.h (bsc#1198776).
- net: ena: Add capabilities field with support for ENI stats capability (bsc#1198776).
- net: ena: add device distinct log prefix to files (bsc#1198776).
- net: ena: Add first_interrupt field to napi struct (bsc#1198776).
- net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (bsc#1198776).
- net: ena: add jiffies of last napi call to stats (bsc#1198776).
- net: ena: add missing ethtool TX timestamping indication (bsc#1198776).
- net: ena: add reserved PCI device ID (bsc#1198776).
- net: ena: add support for reporting of packet drops (bsc#1198776).
- net: ena: add support for the rx offset feature (bsc#1198776).
- net: ena: add support for traffic mirroring (bsc#1198776).
- net: ena: add unmask interrupts statistics to ethtool (bsc#1198776).
- net: ena: aggregate stats increase into a function (bsc#1198776).
- net: ena: allow setting the hash function without changing the key (bsc#1198776).
- net: ena: avoid memory access violation by validating req_id properly (bsc#1198776).
- net: ena: avoid unnecessary admin command when RSS function set fails (bsc#1198776).
- net: ena: avoid unnecessary rearming of interrupt vector when busy-polling (bsc#1198776).
- net: ena: Capitalize all log strings and improve code readability (bsc#1198776).
- net: ena: change default RSS hash function to Toeplitz (bsc#1198776).
- net: ena: Change ENI stats support check to use capabilities field (bsc#1198776).
- net: ena: Change license into format to SPDX in all files (bsc#1198776).
- net: ena: Change log message to netif/dev function (bsc#1198776).
- net: ena: change num_queues to num_io_queues for clarity and consistency (bsc#1198776).
- net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1198776).
- net: ena: Change RSS related macros and variables names (bsc#1198776).
- net: ena: Change the name of bad_csum variable (bsc#1198776).
- net: ena: changes to RSS hash key allocation (bsc#1198776).
- net: ena: clean up indentation issue (bsc#1198776).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64 (bsc#1198776).
- net: ena: cosmetic: code reorderings (bsc#1198776).
- net: ena: cosmetic: extract code to ena_indirection_table_set() (bsc#1198776).
- net: ena: cosmetic: fix line break issues (bsc#1198776).
- net: ena: cosmetic: fix spacing issues (bsc#1198776).
- net: ena: cosmetic: fix spelling and grammar mistakes in comments (bsc#1198776).
- net: ena: cosmetic: minor code changes (bsc#1198776).
- net: ena: cosmetic: remove unnecessary code (bsc#1198776).
- net: ena: cosmetic: remove unnecessary spaces and tabs in ena_com.h macros (bsc#1198776).
- net: ena: cosmetic: rename ena_update_tx/rx_rings_intr_moderation() (bsc#1198776).
- net: ena: cosmetic: set queue sizes to u32 for consistency (bsc#1198776).
- net: ena: do not wake up tx queue when down (bsc#1198776).
- net: ena: drop superfluous prototype (bsc#1198776).
- net: ena: ena-com.c: prevent NULL pointer dereference (bsc#1198776).
- net: ena: enable support of rss hash key and function changes (bsc#1198776).
- net: ena: enable the interrupt_moderation in driver_supported_features (bsc#1198776).
- net: ena: ethtool: Add new device statistics (bsc#1198776).
- net: ena: ethtool: clean up minor indentation issue (bsc#1198776).
- net: ena: ethtool: convert stat_offset to 64 bit resolution (bsc#1198776).
- net: ena: ethtool: get_channels: use combined only (bsc#1198776).
- net: ena: ethtool: remove redundant non-zero check on rc (bsc#1198776).
- net: ena: ethtool: support set_channels callback (bsc#1198776).
- net: ena: ethtool: use correct value for crc32 hash (bsc#1198776).
- net: ena: Fix all static chekers' warnings (bsc#1198776).
- net: ena: Fix build warning in ena_xdp_set() (bsc#1198776).
- net: ena: fix coding style nits (bsc#1198776).
- net: ena: fix continuous keep-alive resets (bsc#1198776).
- net: ena: fix corruption of dev_idx_to_host_tbl (bsc#1198776).
- net: ena: fix default tx interrupt moderation interval (bsc#1198776).
- net: ena: fix ena_com_comp_status_to_errno() return value (bsc#1198776).
- net: ena: Fix error handling when calculating max IO queues number (bsc#1198776).
- net: ena: fix error returning in ena_com_get_hash_function() (bsc#1198776).
- net: ena: fix inaccurate print type (bsc#1198776).
- net: ena: fix incorrect default RSS key (bsc#1198776).
- net: ena: fix incorrect setting of the number of msix vectors (bsc#1198776).
- net: ena: fix incorrect update of intr_delay_resolution (bsc#1198776).
- net: ena: fix incorrectly saving queue numbers when setting RSS indirection table (bsc#1198776).
- net: ena: fix issues in setting interrupt moderation params in ethtool (bsc#1198776).
- net: ena: fix napi handler misbehavior when the napi budget is zero (bsc#1198776).
- net: ena: fix packet's addresses for rx_offset feature (bsc#1198776).
- net: ena: fix potential crash when rxfh key is NULL (bsc#1198776).
- net: ena: fix request of incorrect number of IRQ vectors (bsc#1198776).
- net: ena: fix retrieval of nonadaptive interrupt moderation intervals (bsc#1198776).
- net: ena: fix update of interrupt moderation register (bsc#1198776).
- net: ena: fix uses of round_jiffies() (bsc#1198776).
- net: ena: Fix using plain integer as NULL pointer in ena_init_napi_in_range (bsc#1198776).
- net: ena: Fix wrong rx request id by resetting device (bsc#1198776).
- net: ena: handle bad request id in ena_netdev (bsc#1198776).
- net: ena: Improve error logging in driver (bsc#1198776).
- net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE (bsc#1198776).
- net: ena: make ethtool -l show correct max number of queues (bsc#1198776).
- net: ena: Make missed_tx stat incremental (bsc#1198776).
- net: ena: make symbol 'ena_alloc_map_page' static (bsc#1198776).
- net: ena: move llq configuration from ena_probe to ena_device_init() (bsc#1198776).
- net: ena: Move reset completion print to the reset function (bsc#1198776).
- net: ena: multiple queue creation related cleanups (bsc#1198776).
- net: ena: Prevent reset after device destruction (bsc#1198776).
- net: ena: re-organize code to improve readability (bsc#1198776).
- net: ena: reduce driver load time (bsc#1198776).
- net: ena: reimplement set/get_coalesce() (bsc#1198776).
- net: ena: remove all old adaptive rx interrupt moderation code from ena_com (bsc#1198776).
- net: ena: remove code duplication in ena_com_update_nonadaptive_moderation_interval _*() (bsc#1198776).
- net: ena: remove code that does nothing (bsc#1198776).
- net: ena: Remove ena_calc_queue_size_ctx struct (bsc#1198776).
- net: ena: remove ena_restore_ethtool_params() and relevant fields (bsc#1198776).
- net: ena: remove extra words from comments (bsc#1198776).
- net: ena: Remove module param and change message severity (bsc#1198776).
- net: ena: remove old adaptive interrupt moderation code from ena_netdev (bsc#1198776).
- net: ena: remove redundant print of number of queues (bsc#1198776).
- net: ena: Remove redundant print of placement policy (bsc#1198776).
- net: ena: Remove redundant return code check (bsc#1198776).
- net: ena: remove set but not used variable 'hash_key' (bsc#1198776).
- net: ena: Remove unused code (bsc#1198776).
- net: ena: rename ena_com_free_desc to make API more uniform (bsc#1198776).
- net: ena: rss: do not allocate key when not supported (bsc#1198776).
- net: ena: rss: fix failure to get indirection table (bsc#1198776).
- net: ena: rss: store hash function as values and not bits (bsc#1198776).
- net: ena: Select DIMLIB for ENA_ETHERNET (bsc#1198776).
- net: ena: set initial DMA width to avoid intel iommu issue (bsc#1198776).
- net: ena: simplify ena_com_update_intr_delay_resolution() (bsc#1198776).
- net: ena: store values in their appropriate variables types (bsc#1198776).
- net: ena: support new LLQ acceleration mode (bsc#1198776).
- net: ena: switch to dim algorithm for rx adaptive interrupt moderation (bsc#1198776).
- net: ena: use constant value for net_device allocation (bsc#1198776).
- net: ena: Use dev_alloc() in RX buffer allocation (bsc#1198776).
- net: ena: use explicit variable size for clarity (bsc#1198776).
- net: ena: use SHUTDOWN as reset reason when closing interface (bsc#1198776).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Remove unnecessary check of cqe_type in mana_process_rx_cqe() (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: update net_dim documentation after rename (bsc#1198776).
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (bsc#1199314).
- scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() (bsc#1028340 bsc#1198825).
- SUNRPC: change locking for xs_swap_enable/disable (bsc#1196367).
- x86/pm: Save the MSR validity status at context setup (bsc#1114648).
- x86/speculation: Restore speculation related MSRs during S3 resume (bsc#1114648).
</description>
<summary>Security update for the Linux Kernel</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.24574

Places