SUSE-SU-2022:3693-1

Advisory lineage Upstream: 7 Downstream: 0
Published: 22 Oct 2022, 09:58
Last modified:04 Feb 2026, 03:28

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

22 Oct 2022, 09:58
Published
Vulnerability first disclosed
04 Feb 2026, 03:28
Last Modified
Vulnerability information updated

Description

Security update for the Linux Kernel The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-20008: Fixed local information disclosure due to possibility to read kernel heap memory via mmc_blk_read_single of block.c (bnc#1199564). - CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677). - CVE-2022-32296: Fixed vulnerability where TCP servers were allowed to identify clients by observing what source ports are used (bnc#1200288). - CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552). - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960). - CVE-2022-41848: Fixed a race condition in drivers/char/pcmcia/synclink_cs.c mgslpc_ioctl and mgslpc_detach (bnc#1203987). The following non-security bugs were fixed: - dtb: Do not include sources in src.rpm - refer to kernel-source Same as other kernel binary packages there is no need to carry duplicate sources in dtb packages. - mkspec: eliminate @NOSOURCE@ macro This should be alsways used with @SOURCES@, just include the content there. - net: mana: Add rmb after checking owner bits (git-fixes). - net: mana: Add the Linux MANA PF driver (bnc#1201309, jsc#PED-529). - x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.

Affected Systems

  • opensuse•kernel-debug&distro=openSUSE Leap 15.3

    < 4.12.14-150100.197.126.1

  • opensuse•kernel-debug&distro=openSUSE Leap 15.4

    < 4.12.14-150100.197.126.1

  • opensuse•kernel-default&distro=openSUSE Leap 15.3

    < 4.12.14-150100.197.126.1

  • opensuse•kernel-default&distro=openSUSE Leap 15.4

    < 4.12.14-150100.197.126.1

  • opensuse•kernel-kvmsmall&distro=openSUSE Leap 15.3

    < 4.12.14-150100.197.126.1

  • opensuse•kernel-kvmsmall&distro=openSUSE Leap 15.4

    < 4.12.14-150100.197.126.1

  • opensuse•kernel-vanilla&distro=openSUSE Leap 15.3

    < 4.12.14-150100.197.126.1

  • opensuse•kernel-vanilla&distro=openSUSE Leap 15.4

    < 4.12.14-150100.197.126.1

  • opensuse•kernel-zfcpdump&distro=openSUSE Leap 15.3

    < 4.12.14-150100.197.126.1

  • opensuse•kernel-zfcpdump&distro=openSUSE Leap 15.4

    < 4.12.14-150100.197.126.1

  • suse•kernel-default&distro=SUSE Enterprise Storage 6

    < 4.12.14-150100.197.126.1

  • suse•kernel-default&distro=SUSE Linux Enterprise High Availability Extension 15 SP1

    < 4.12.14-150100.197.126.1

  • suse•kernel-default&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

    < 4.12.14-150100.197.126.1

  • suse•kernel-default&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

    < 4.12.14-150100.197.126.1

  • suse•kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP1

    < 4.12.14-150100.197.126.1

  • suse•kernel-default&distro=SUSE Linux Enterprise Server 15 SP1-BCL

    < 4.12.14-150100.197.126.1

  • suse•kernel-default&distro=SUSE Linux Enterprise Server 15 SP1-LTSS

    < 4.12.14-150100.197.126.1

  • suse•kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1

    < 4.12.14-150100.197.126.1

  • suse•kernel-docs&distro=SUSE Enterprise Storage 6

    < 4.12.14-150100.197.126.1

  • suse•kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

    < 4.12.14-150100.197.126.1

  • suse•kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

    < 4.12.14-150100.197.126.1

  • suse•kernel-docs&distro=SUSE Linux Enterprise Server 15 SP1-BCL

    < 4.12.14-150100.197.126.1

  • suse•kernel-docs&distro=SUSE Linux Enterprise Server 15 SP1-LTSS

    < 4.12.14-150100.197.126.1

  • suse•kernel-docs&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1

    < 4.12.14-150100.197.126.1

  • suse•kernel-livepatch-SLE15-SP1_Update_35&distro=SUSE Linux Enterprise Live Patching 15 SP1

    < 1-150100.3.3.1

  • suse•kernel-obs-build&distro=SUSE Enterprise Storage 6

    < 4.12.14-150100.197.126.1

  • suse•kernel-obs-build&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

    < 4.12.14-150100.197.126.1

  • suse•kernel-obs-build&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

    < 4.12.14-150100.197.126.1

  • suse•kernel-obs-build&distro=SUSE Linux Enterprise Server 15 SP1-BCL

    < 4.12.14-150100.197.126.1

  • suse•kernel-obs-build&distro=SUSE Linux Enterprise Server 15 SP1-LTSS

    < 4.12.14-150100.197.126.1

  • suse•kernel-obs-build&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1

    < 4.12.14-150100.197.126.1

  • suse•kernel-source&distro=SUSE Enterprise Storage 6

    < 4.12.14-150100.197.126.1

  • suse•kernel-source&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

    < 4.12.14-150100.197.126.1

  • suse•kernel-source&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

    < 4.12.14-150100.197.126.1

  • suse•kernel-source&distro=SUSE Linux Enterprise Server 15 SP1-BCL

    < 4.12.14-150100.197.126.1

  • suse•kernel-source&distro=SUSE Linux Enterprise Server 15 SP1-LTSS

    < 4.12.14-150100.197.126.1

  • suse•kernel-source&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1

    < 4.12.14-150100.197.126.1

  • suse•kernel-syms&distro=SUSE Enterprise Storage 6

    < 4.12.14-150100.197.126.1

  • suse•kernel-syms&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

    < 4.12.14-150100.197.126.1

  • suse•kernel-syms&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

    < 4.12.14-150100.197.126.1

  • suse•kernel-syms&distro=SUSE Linux Enterprise Server 15 SP1-BCL

    < 4.12.14-150100.197.126.1

  • suse•kernel-syms&distro=SUSE Linux Enterprise Server 15 SP1-LTSS

    < 4.12.14-150100.197.126.1

  • suse•kernel-syms&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1

    < 4.12.14-150100.197.126.1

  • suse•kernel-zfcpdump&distro=SUSE Linux Enterprise Server 15 SP1-LTSS

    < 4.12.14-150100.197.126.1

References (16)