SUSE-SU-2024:0926-1

Description

Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863) - CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860) - CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039) - CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456). - CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831). - CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918). - CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735). - CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040). - CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845). - CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870). - CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469). - CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514). - CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932). - CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930). - CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931). - CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917). - CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736). - CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255). - CVE-2021-47005: Fixed a NULL pointer dereference for ->get_features() (bsc#1220660). - CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187). - CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295). - CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915). - CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742). - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825). - CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250). - CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444) - CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328). - CVE-2021-47012: Fixed a use after free in siw_alloc_mr (bsc#1220627). - CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238). - CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649) - CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796) - CVE-2021-46989: Fixed a bug by preventing corruption in shrinking truncate in hfsplus (bsc#1220737). - CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436). - CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459) - CVE-2019-25162: Fixed a potential use after free (bsc#1220409). - CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570). - CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (bsc#1220745). - CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241). - CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343). - CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140). - CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240). - CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398). - CVE-2024-26593: Fixed block process call transactions (bsc#1220009). - CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641). - CVE-2024-26586: Fixed stack corruption (bsc#1220243). - CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344). - CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253). - CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835). - CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127). - CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689). - CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128). The following non-security bugs were fixed: - EDAC/thunderx: Fix possible out-of-bounds string access (bsc#1220330) - KVM: Destroy target device if coalesced MMIO unregistration fails (git-fixes). - KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (git-fixes). - KVM: VMX: Move VERW closer to VMentry for MDS mitigation (git-fixes). - KVM: VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (git-fixes). - KVM: x86: add support for CPUID leaf 0x80000021 (git-fixes). - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (git-fixes). - KVM: x86: synthesize CPUID leaf 0x80000021h if useful (git-fixes). - KVM: x86: work around QEMU issue with synthetic CPUID leaves (git-fixes). - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (git-fixes). - x86/bugs: Add asm helpers for executing VERW (git-fixes). - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (git-fixes). - x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (git-fixes). - x86/entry_32: Add VERW just before userspace transition (git-fixes). - x86/entry_64: Add VERW just before userspace transition (git-fixes).

Affected Systems

• suse•kernel-default-base&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

  < 5.3.18-150200.24.183.1.150200.9.93.2

• suse•kernel-default-base&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

  < 5.3.18-150200.24.183.1.150200.9.93.2

• suse•kernel-default-base&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

  < 5.3.18-150200.24.183.1.150200.9.93.2

• suse•kernel-default&distro=SUSE Linux Enterprise High Availability Extension 15 SP2

  < 5.3.18-150200.24.183.1

• suse•kernel-default&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

  < 5.3.18-150200.24.183.1

• suse•kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP2

  < 5.3.18-150200.24.183.1

• suse•kernel-default&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

  < 5.3.18-150200.24.183.1

• suse•kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

  < 5.3.18-150200.24.183.1

• suse•kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

  < 5.3.18-150200.24.183.1

• suse•kernel-docs&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

  < 5.3.18-150200.24.183.1

• suse•kernel-docs&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

  < 5.3.18-150200.24.183.1

• suse•kernel-livepatch-SLE15-SP2_Update_46&distro=SUSE Linux Enterprise Live Patching 15 SP2

  < 1-150200.5.3.2

• suse•kernel-obs-build&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

  < 5.3.18-150200.24.183.1

• suse•kernel-obs-build&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

  < 5.3.18-150200.24.183.1

• suse•kernel-obs-build&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

  < 5.3.18-150200.24.183.1

• suse•kernel-preempt&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

  < 5.3.18-150200.24.183.1

• suse•kernel-preempt&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

  < 5.3.18-150200.24.183.1

• suse•kernel-preempt&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

  < 5.3.18-150200.24.183.1

• suse•kernel-source&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

  < 5.3.18-150200.24.183.1

• suse•kernel-source&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

  < 5.3.18-150200.24.183.1

• suse•kernel-source&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

  < 5.3.18-150200.24.183.1

• suse•kernel-syms&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

  < 5.3.18-150200.24.183.1

• suse•kernel-syms&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

  < 5.3.18-150200.24.183.1

• suse•kernel-syms&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

  < 5.3.18-150200.24.183.1

References (137)

• https://www.suse.com/support/update/announcement/2024/suse-su-20240926-1/
• https://bugzilla.suse.com/1155518
• https://bugzilla.suse.com/1184436
• https://bugzilla.suse.com/1185988
• https://bugzilla.suse.com/1186286
• https://bugzilla.suse.com/1200599
• https://bugzilla.suse.com/1212514
• https://bugzilla.suse.com/1213456
• https://bugzilla.suse.com/1218689
• https://bugzilla.suse.com/1218915
• https://bugzilla.suse.com/1219127
• https://bugzilla.suse.com/1219128
• https://bugzilla.suse.com/1219146
• https://bugzilla.suse.com/1219295
• https://bugzilla.suse.com/1219653
• https://bugzilla.suse.com/1219827
• https://bugzilla.suse.com/1219835
• https://bugzilla.suse.com/1220009
• https://bugzilla.suse.com/1220140
• https://bugzilla.suse.com/1220187
• https://bugzilla.suse.com/1220238
• https://bugzilla.suse.com/1220240
• https://bugzilla.suse.com/1220241
• https://bugzilla.suse.com/1220243
• https://bugzilla.suse.com/1220250
• https://bugzilla.suse.com/1220253
• https://bugzilla.suse.com/1220255
• https://bugzilla.suse.com/1220328
• https://bugzilla.suse.com/1220330
• https://bugzilla.suse.com/1220344
• https://bugzilla.suse.com/1220398
• https://bugzilla.suse.com/1220409
• https://bugzilla.suse.com/1220416
• https://bugzilla.suse.com/1220418
• https://bugzilla.suse.com/1220421
• https://bugzilla.suse.com/1220436
• https://bugzilla.suse.com/1220444
• https://bugzilla.suse.com/1220459
• https://bugzilla.suse.com/1220469
• https://bugzilla.suse.com/1220482
• https://bugzilla.suse.com/1220526
• https://bugzilla.suse.com/1220538
• https://bugzilla.suse.com/1220570
• https://bugzilla.suse.com/1220572
• https://bugzilla.suse.com/1220599
• https://bugzilla.suse.com/1220627
• https://bugzilla.suse.com/1220641
• https://bugzilla.suse.com/1220649
• https://bugzilla.suse.com/1220660
• https://bugzilla.suse.com/1220700
• https://bugzilla.suse.com/1220735
• https://bugzilla.suse.com/1220736
• https://bugzilla.suse.com/1220737
• https://bugzilla.suse.com/1220742
• https://bugzilla.suse.com/1220745
• https://bugzilla.suse.com/1220767
• https://bugzilla.suse.com/1220796
• https://bugzilla.suse.com/1220825
• https://bugzilla.suse.com/1220826
• https://bugzilla.suse.com/1220831
• https://bugzilla.suse.com/1220845
• https://bugzilla.suse.com/1220860
• https://bugzilla.suse.com/1220863
• https://bugzilla.suse.com/1220870
• https://bugzilla.suse.com/1220917
• https://bugzilla.suse.com/1220918
• https://bugzilla.suse.com/1220930
• https://bugzilla.suse.com/1220931
• https://bugzilla.suse.com/1220932
• https://bugzilla.suse.com/1221039
• https://bugzilla.suse.com/1221040
• https://bugzilla.suse.com/1221287
• https://www.suse.com/security/cve/CVE-2019-25162
• https://www.suse.com/security/cve/CVE-2020-36777
• https://www.suse.com/security/cve/CVE-2020-36784
• https://www.suse.com/security/cve/CVE-2021-46904
• https://www.suse.com/security/cve/CVE-2021-46905
• https://www.suse.com/security/cve/CVE-2021-46906
• https://www.suse.com/security/cve/CVE-2021-46915
• https://www.suse.com/security/cve/CVE-2021-46924
• https://www.suse.com/security/cve/CVE-2021-46929
• https://www.suse.com/security/cve/CVE-2021-46932
• https://www.suse.com/security/cve/CVE-2021-46934
• https://www.suse.com/security/cve/CVE-2021-46953
• https://www.suse.com/security/cve/CVE-2021-46964
• https://www.suse.com/security/cve/CVE-2021-46966
• https://www.suse.com/security/cve/CVE-2021-46974
• https://www.suse.com/security/cve/CVE-2021-46989
• https://www.suse.com/security/cve/CVE-2021-47005
• https://www.suse.com/security/cve/CVE-2021-47012
• https://www.suse.com/security/cve/CVE-2021-47013
• https://www.suse.com/security/cve/CVE-2021-47054
• https://www.suse.com/security/cve/CVE-2021-47060
• https://www.suse.com/security/cve/CVE-2021-47061
• https://www.suse.com/security/cve/CVE-2021-47069
• https://www.suse.com/security/cve/CVE-2021-47076
• https://www.suse.com/security/cve/CVE-2021-47078
• https://www.suse.com/security/cve/CVE-2021-47083
• https://www.suse.com/security/cve/CVE-2022-20154
• https://www.suse.com/security/cve/CVE-2022-48627
• https://www.suse.com/security/cve/CVE-2023-28746
• https://www.suse.com/security/cve/CVE-2023-35827
• https://www.suse.com/security/cve/CVE-2023-46343
• https://www.suse.com/security/cve/CVE-2023-51042
• https://www.suse.com/security/cve/CVE-2023-52340
• https://www.suse.com/security/cve/CVE-2023-52429
• https://www.suse.com/security/cve/CVE-2023-52439
• https://www.suse.com/security/cve/CVE-2023-52443
• https://www.suse.com/security/cve/CVE-2023-52445
• https://www.suse.com/security/cve/CVE-2023-52448
• https://www.suse.com/security/cve/CVE-2023-52449
• https://www.suse.com/security/cve/CVE-2023-52451
• https://www.suse.com/security/cve/CVE-2023-52463
• https://www.suse.com/security/cve/CVE-2023-52475
• https://www.suse.com/security/cve/CVE-2023-52478
• https://www.suse.com/security/cve/CVE-2023-52482
• https://www.suse.com/security/cve/CVE-2023-52502
• https://www.suse.com/security/cve/CVE-2023-52530
• https://www.suse.com/security/cve/CVE-2023-52531
• https://www.suse.com/security/cve/CVE-2023-52532
• https://www.suse.com/security/cve/CVE-2023-52569
• https://www.suse.com/security/cve/CVE-2023-52574
• https://www.suse.com/security/cve/CVE-2023-52597
• https://www.suse.com/security/cve/CVE-2023-52605
• https://www.suse.com/security/cve/CVE-2024-0340
• https://www.suse.com/security/cve/CVE-2024-0607
• https://www.suse.com/security/cve/CVE-2024-1151
• https://www.suse.com/security/cve/CVE-2024-23849
• https://www.suse.com/security/cve/CVE-2024-23851
• https://www.suse.com/security/cve/CVE-2024-26585
• https://www.suse.com/security/cve/CVE-2024-26586
• https://www.suse.com/security/cve/CVE-2024-26589
• https://www.suse.com/security/cve/CVE-2024-26593
• https://www.suse.com/security/cve/CVE-2024-26595
• https://www.suse.com/security/cve/CVE-2024-26602
• https://www.suse.com/security/cve/CVE-2024-26607
• https://www.suse.com/security/cve/CVE-2024-26622