🛡️ SUSE-SU-2022:0181-1 — kernel-rt (CVE-2021-4001 +9 more)

Security update for the Linux Kernel

The SUSE MicroOS 5.0 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2021-4001: Fixed a race condition when the EBPF map is frozen. (bsc#1192990)
• CVE-2021-4002: Added a missing TLB flush that could lead to leak or corruption of data in hugetlbfs. (bsc#1192946)
• CVE-2021-28711: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening blkfront against event channel storms. (bsc#1193440)
• CVE-2021-28712: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening netfront against event channel storms. (bsc#1193440)
• CVE-2021-28713: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening hvc_xen against event channel storms. (bsc#1193440)
• CVE-2021-28714: Fixed an issue where a guest could force Linux netback driver to hog large amounts of kernel memory by fixing rx queue stall detection. (bsc#1193442)
• CVE-2021-28715: Fixed an issue where a guest could force Linux netback driver to hog large amounts of kernel memory by do not queueing unlimited number of packages. (bsc#1193442)
• CVE-2021-33098: Fixed improper input validation in the Intel(R) Ethernet ixgbe driver that could allow an authenticate user to cause a denial of service (bnc#1192877).
• CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. (bnc#1192845)
• CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to cause a denial of service. (bnc#1192847)

The following non-security bugs were fixed:

• acpi: battery: Accept charges over the design capacity as full (git-fixes).
• acpi: pmic: Fix intel_pmic_regs_handler() read accesses (git-fixes).
• acpica: Avoid evaluating methods too early during system resume (git-fixes).
• alsa: ISA: not for M68K (git-fixes).
• alsa: ctxfi: Fix out-of-range access (git-fixes).
• alsa: gus: fix null pointer dereference on pointer block (git-fixes).
• alsa: hda/realtek: Add a quirk for Acer Spin SP513-54N (git-fixes).
• alsa: hda/realtek: Add quirk for ASUS UX550VE (git-fixes).
• alsa: hda/realtek: Add quirk for Clevo PC70HS (git-fixes).
• alsa: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED (git-fixes).
• alsa: hda: hdac_ext_stream: fix potential locking issues (git-fixes).
• alsa: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() (git-fixes).
• alsa: synth: missing check for possible NULL after the call to kstrdup (git-fixes).
• alsa: timer: Fix use-after-free problem (git-fixes).
• alsa: timer: Unconditionally unlink slave instances, too (git-fixes).
• alsa: usb-audio: Add registration quirk for JBL Quantum 400 (git-fixes).
• arm: 8986/1: hw_breakpoint: Do not invoke overflow handler on uaccess watchpoints (git-fixes)
• arm: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT (git-fixes)
• arm: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe (git-fixes)
• arm: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores (git-fixes)
• arm: 9064/1: hw_breakpoint: Do not directly check the event's (git-fixes)
• arm: 9071/1: uprobes: Do not hook on thumb instructions (git-fixes)
• arm: 9081/1: fix gcc-10 thumb2-kernel regression (git-fixes)
• arm: 9091/1: Revert 'mm: qsd8x50: Fix incorrect permission faults' (git-fixes)
• arm: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned (git-fixes)
• arm: 9134/1: remove duplicate memcpy() definition (git-fixes)
• arm: 9139/1: kprobes: fix arch_init_kprobes() prototype (git-fixes)
• arm: 9141/1: only warn about XIP address when not compile testing (git-fixes)
• arm: 9155/1: fix early early_iounmap() (git-fixes)
• arm: OMAP2+: Fix legacy mode dss_reset (git-fixes)
• arm: OMAP2+: omap_device: fix idling of devices during probe (git-fixes)
• arm: at91: pm: add missing put_device() call in at91_pm_sram_init() (git-fixes)
• arm: at91: pm: of_node_put() after its usage (git-fixes)
• arm: bcm: Select ARM_TIMER_SP804 for ARCH_BCM_NSP (git-fixes)
• arm: dts sunxi: Relax a bit the CMA pool allocation range (git-fixes)
• arm: dts: BCM5301X: Add interrupt properties to GPIO node (git-fixes)
• arm: dts: BCM5301X: Fix I2C controller interrupt (git-fixes)
• arm: dts: BCM5301X: Fixed QSPI compatible string (git-fixes)
• arm: dts: Configure missing thermal interrupt for 4430 (git-fixes)
• arm: dts: Fix dcan driver probe failed on am437x platform (git-fixes)
• arm: dts: Fix duovero smsc interrupt for suspend (git-fixes)
• arm: dts: NSP: Correct FA2 mailbox node (git-fixes)
• arm: dts: NSP: Disable PL330 by default, add dma-coherent property (git-fixes)
• arm: dts: NSP: Fixed QSPI compatible string (git-fixes)
• arm: dts: Remove non-existent i2c1 from 98dx3236 (git-fixes)
• arm: dts: am335x-pocketbeagle: Fix mmc0 Write Protect (git-fixes)
• arm: dts: am