{"schemaVersion":3,"id":"SUSE-SU-2022:0289-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for the Linux Kernel\n\nThe SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2021-4083: Fixed race condition in Unix domain socket garbage collection that could lead to read memory after free (bsc#1193727).\n- CVE-2021-4135: Fixed an information leak in the nsim_bpf_map_alloc function (bsc#1193927).\n- CVE-2021-4149: Fixed improper lock operation in btrfs that allowed users to crash the kernel or deadlock the system (bsc#1194001).\n- CVE-2021-4197: Fixed a cgroup issue where lower privileged processes could write to fds of lower privileged ones that could lead to privilege escalation (bsc#1194302).\n- CVE-2021-4202: Fixed race condition in nci_request() that could cause use-after-free (bsc#1194529).\n- CVE-2021-44733: Fixed a use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel that occured because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object (bnc#1193767).\n- CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source addresses (bsc#1194094).\n- CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c (bnc#1194087).\n- CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517).\n- CVE-2022-0322: Fixed a denial of service in SCTP sctp_addto_chunk (bsc#1194985).\n\nThe following non-security bugs were fixed:\n\n- ext4: Avoid trim error on fs with small groups (bsc#1191271).\n- fget: clarify and improve __fget_files() implementation (bsc#1193727).\n- kabi/severities: Add a kabi exception for drivers/tee/tee\n- kprobes: Limit max data_size of the kretprobe instances (bsc#1193669).\n- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).\n- media: Revert 'media: uvcvideo: Set unique vdev name based in type' (bsc#1193255).\n- moxart: fix potential use-after-free on remove path (bsc#1194516).\n- powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic (bsc#1193901).\n- powerpc: handle kdump appropriately with crash_kexec_post_notifiers option (bsc#1193901).\n- tpm: fix potential NULL pointer access in tpm_del_char_device (bsc#1184209, bsc#1193660).\n- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).","dates":{"published":"2022-02-02T09:02:15.000Z","modified":"2026-02-04T04:27:01.045Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"kernel-rt_debug&distro=SUSE Real Time Module 15 SP2","name":"kernel-rt_debug","label":"kernel-rt_debug&distro=SUSE Real Time Module 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt_debug&distro=SUSE Real Time Module 15 SP2","purlType":"rpm","versions":[{"text":"< 5.3.18-68.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-68.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.0","name":"kernel-rt","label":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt&distro=SUSE Linux Enterprise Micro 5.0","purlType":"rpm","versions":[{"text":"< 5.3.18-68.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-68.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-rt&distro=SUSE Real Time Module 15 SP2","name":"kernel-rt","label":"kernel-rt&distro=SUSE Real Time Module 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt&distro=SUSE Real Time Module 15 SP2","purlType":"rpm","versions":[{"text":"< 5.3.18-68.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-68.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source-rt&distro=SUSE Real Time Module 15 SP2","name":"kernel-source-rt","label":"kernel-source-rt&distro=SUSE Real Time Module 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE Real Time Module 15 SP2","purlType":"rpm","versions":[{"text":"< 5.3.18-68.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-68.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-syms-rt&distro=SUSE Real Time Module 15 SP2","name":"kernel-syms-rt","label":"kernel-syms-rt&distro=SUSE Real Time Module 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-syms-rt&distro=SUSE Real Time Module 15 SP2","purlType":"rpm","versions":[{"text":"< 5.3.18-68.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-68.1","eol":null,"hubHref":null}],"affectedCount":5,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220289-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20220289-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1071995","label":"bugzilla.suse.com/1071995","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184209","label":"bugzilla.suse.com/1184209","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1191271","label":"bugzilla.suse.com/1191271","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1193255","label":"bugzilla.suse.com/1193255","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1193660","label":"bugzilla.suse.com/1193660","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1193669","label":"bugzilla.suse.com/1193669","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1193727","label":"bugzilla.suse.com/1193727","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1193767","label":"bugzilla.suse.com/1193767","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1193901","label":"bugzilla.suse.com/1193901","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1193927","label":"bugzilla.suse.com/1193927","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194001","label":"bugzilla.suse.com/1194001","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194087","label":"bugzilla.suse.com/1194087","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194094","label":"bugzilla.suse.com/1194094","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194302","label":"bugzilla.suse.com/1194302","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194516","label":"bugzilla.suse.com/1194516","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194517","label":"bugzilla.suse.com/1194517","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194529","label":"bugzilla.suse.com/1194529","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194888","label":"bugzilla.suse.com/1194888","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194985","label":"bugzilla.suse.com/1194985","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4083","label":"www.suse.com/security/cve/CVE-2021-4083","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4135","label":"www.suse.com/security/cve/CVE-2021-4135","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4149","label":"www.suse.com/security/cve/CVE-2021-4149","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4197","label":"www.suse.com/security/cve/CVE-2021-4197","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4202","label":"www.suse.com/security/cve/CVE-2021-4202","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44733","label":"www.suse.com/security/cve/CVE-2021-44733","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45485","label":"www.suse.com/security/cve/CVE-2021-45485","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45486","label":"www.suse.com/security/cve/CVE-2021-45486","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0185","label":"www.suse.com/security/cve/CVE-2022-0185","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0322","label":"www.suse.com/security/cve/CVE-2022-0322","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2021-4083","CVE-2021-4135","CVE-2021-4149","CVE-2021-4197","CVE-2021-4202","CVE-2021-44733","CVE-2021-45485","CVE-2021-45486","CVE-2022-0185","CVE-2022-0322"],"downstream":[],"duplicates":[],"related":["CVE-2021-4083","CVE-2021-4135","CVE-2021-4149","CVE-2021-4197","CVE-2021-4202","CVE-2021-44733","CVE-2021-45485","CVE-2021-45486","CVE-2022-0185","CVE-2022-0322"]},"timeline":[{"kind":"published","date":"2022-02-02T09:02:15.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:27:01.045Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T09:39:58.477Z","stale":false,"partial":false}}