{"affected":[{"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.196.2","kernel-default-base":"4.4.121-92.196.2","kernel-default-devel":"4.4.121-92.196.2","kernel-devel":"4.4.121-92.196.2","kernel-macros":"4.4.121-92.196.2","kernel-source":"4.4.121-92.196.2","kernel-syms":"4.4.121-92.196.2"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","name":"kernel-default","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.4.121-92.196.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.196.2","kernel-default-base":"4.4.121-92.196.2","kernel-default-devel":"4.4.121-92.196.2","kernel-devel":"4.4.121-92.196.2","kernel-macros":"4.4.121-92.196.2","kernel-source":"4.4.121-92.196.2","kernel-syms":"4.4.121-92.196.2"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","name":"kernel-source","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.4.121-92.196.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.196.2","kernel-default-base":"4.4.121-92.196.2","kernel-default-devel":"4.4.121-92.196.2","kernel-devel":"4.4.121-92.196.2","kernel-macros":"4.4.121-92.196.2","kernel-source":"4.4.121-92.196.2","kernel-syms":"4.4.121-92.196.2"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","name":"kernel-syms","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.4.121-92.196.2"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).\n- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).\n- CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).\n- CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).\n- CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).\n- CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).\n- CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).\n- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).\n- CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).\n- CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).\n- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).\n- CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bsc#1198702).\n- CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bsc#1204653).\n- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism (bsc#1177282).\n- CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bsc#1204402).\n- CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bsc#1204635).\n- CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bsc#1204646).\n- CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bsc#1204647).\n- CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bsc#1204574).\n- CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bsc#1204479).\n- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).\n- CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bsc#1204431).\n- CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bsc#1204354).\n- CVE-2022-2663: Fixed an issue which allowed a firewall to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured (bsc#1202097).\n- CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory (bsc#1203514).\n- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bsc#1204168).\n- CVE-2022-3169: Fixed an denial of service though request to NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET (bsc#1203290).\n- CVE-2022-40307: Fixed a race condition that could had been exploited to trigger a use-after-free in the efi firmware capsule-loader.c (bsc#1203322).\n- CVE-2022-41848: Fixed a race condition in drivers/char/pcmcia/synclink_cs.c mgslpc_ioctl and mgslpc_detach (bsc#1203987).\n\nThe following non-security bugs were fixed:\n\n- x86/build/64: Force the linker to use 2MB page size (bnc#1012382, bsc#1206091).\n","id":"SUSE-SU-2022:4561-1","modified":"2022-12-19T12:23:28Z","published":"2022-12-19T12:23:28Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224561-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012382"},{"type":"REPORT","url":"https://bugzilla.suse.com/1129898"},{"type":"REPORT","url":"https://bugzilla.suse.com/1177282"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196018"},{"type":"REPORT","url":"https://bugzilla.suse.com/1198702"},{"type":"REPORT","url":"https://bugzilla.suse.com/1202097"},{"type":"REPORT","url":"https://bugzilla.suse.com/1202686"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203008"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203290"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203322"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203514"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203960"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203987"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204166"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204168"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204170"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204354"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204402"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204414"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204431"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204432"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204439"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204479"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204574"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204576"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204631"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204635"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204636"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204646"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204647"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204653"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204868"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205128"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205130"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205220"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205514"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205671"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205796"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206091"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-3874"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-26541"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-4037"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-2663"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-28748"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-2964"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3169"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3424"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3524"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3542"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3565"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3567"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3586"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3594"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3621"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3628"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3629"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3635"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3646"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3649"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3903"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-40307"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-40768"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-4095"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-41848"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-41850"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-41858"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-42703"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-43750"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-43945"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-45934"}],"related":["CVE-2019-3874","CVE-2020-26541","CVE-2021-4037","CVE-2022-2663","CVE-2022-28748","CVE-2022-2964","CVE-2022-3169","CVE-2022-3424","CVE-2022-3524","CVE-2022-3542","CVE-2022-3565","CVE-2022-3567","CVE-2022-3586","CVE-2022-3594","CVE-2022-3621","CVE-2022-3628","CVE-2022-3629","CVE-2022-3635","CVE-2022-3646","CVE-2022-3649","CVE-2022-3903","CVE-2022-40307","CVE-2022-40768","CVE-2022-4095","CVE-2022-41848","CVE-2022-41850","CVE-2022-41858","CVE-2022-42703","CVE-2022-43750","CVE-2022-43945","CVE-2022-45934"],"summary":"Security update for the Linux Kernel","upstream":["CVE-2019-3874","CVE-2020-26541","CVE-2021-4037","CVE-2022-2663","CVE-2022-28748","CVE-2022-2964","CVE-2022-3169","CVE-2022-3424","CVE-2022-3524","CVE-2022-3542","CVE-2022-3565","CVE-2022-3567","CVE-2022-3586","CVE-2022-3594","CVE-2022-3621","CVE-2022-3628","CVE-2022-3629","CVE-2022-3635","CVE-2022-3646","CVE-2022-3649","CVE-2022-3903","CVE-2022-40307","CVE-2022-40768","CVE-2022-4095","CVE-2022-41848","CVE-2022-41850","CVE-2022-41858","CVE-2022-42703","CVE-2022-43750","CVE-2022-43945","CVE-2022-45934"]}