🛡️ SUSE-SU-2022:0761-1 — kernel-rt (CVE-2022-0001 +7 more)

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes.

• CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
• CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
• CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).
• CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079)
• CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd() (bsc#1196155).
• CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987).
• CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).
• CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).

The following non-security bugs were fixed:

• Bluetooth: bfusb: fix division by zero in send path (git-fixes).
• EDAC/xgene: Fix deferred probing (bsc#1114648).
• IB/rdmavt: Validate remote_addr during loopback atomic tests (bsc#1114685).
• NFSv4.x: by default serialize open/close operations (bsc#1114893 bsc#1195934). Make this work-around optional
• NFSv42: Do not fail clone() unless the OP_CLONE operation failed (git-fixes).
• NFSv42: Fix pagecache invalidation after COPY/CLONE (git-fixes).
• NFSv4: Handle case where the lookup of a directory fails (git-fixes).
• NFSv4: nfs_atomic_open() can race when looking up a non-regular file (git-fixes).
• PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller (git-fixes).
• RDMA/bnxt_re: Fix query SRQ failure (bsc#1050244).
• RDMA/mlx5: Set user priority for DCT (bsc#1103991).
• RDMA/netlink: Add __maybe_unused to static inline in C file (bsc#1046306).
• crypto: af_alg - get_page upon reassignment to TX SGL (bsc#1195840).
• cxgb4: fix eeprom len when diagnostics not implemented (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584).
• e1000e: Fix packet loss on Tiger Lake and later (bsc#1158533).
• ext4: avoid trim error on fs with small groups (bsc#1191271).
• fuse: annotate lock in fuse_reverse_inval_entry() (bsc#1195795).
• gve: Add RX context (bsc#1191655).
• gve: Add a jumbo-frame device option (bsc#1191655).
• gve: Add consumed counts to ethtool stats (bsc#1191655).
• gve: Add netif_set_xps_queue call (bsc#1191655).
• gve: Add optional metadata descriptor type GVE_TXD_MTD (bsc#1191655).
• gve: Add rx buffer pagecnt bias (bsc#1191655).
• gve: Allow pageflips on larger pages (bsc#1191655).
• gve: Avoid freeing NULL pointer (bsc#1191655).
• gve: Correct available tx qpl check (bsc#1191655).
• gve: Correct order of processing device options (bsc#1191655).
• gve: DQO: avoid unused variable warnings (bsc#1191655).
• gve: Do lazy cleanup in TX path (bsc#1191655).
• gve: Fix GFP flags when allocing pages (bsc#1191655).
• gve: Implement packet continuation for RX (bsc#1191655).
• gve: Implement suspend/resume/shutdown (bsc#1191655).
• gve: Move the irq db indexes out of the ntfy block struct (bsc#1191655).
• gve: Properly handle errors in gve_assign_qpl (bsc#1191655).
• gve: Recording rx queue before sending to napi (bsc#1191655).
• gve: Switch to use napi_complete_done (bsc#1191655).
• gve: Track RX buffer allocation failures (bsc#1191655).
• gve: Update gve_free_queue_page_list signature (bsc#1191655).
• gve: Use kvcalloc() instead of kvzalloc() (bsc#1191655).
• gve: fix for null pointer dereference (bsc#1191655).
• gve: fix gve_get_stats() (bsc#1191655).
• gve: fix the wrong AdminQ buffer queue index check (bsc#1191655).
• gve: fix unmatched u64_stats_update_end() (bsc#1191655).
• gve: remove memory barrier around seqno (bsc#1191655).
• gve: report 64bit tx_bytes counter from gve_handle_report_stats() (bsc#1191655).
• i40e: Fix changing previously set num_queue_pairs for PFs (bsc#1094978).
• i40e: Fix correct max_pkt_size on VF RX queue (bsc#1101816 ).
• i40e: Fix creation of first queue by omitting it if is not power of two (bsc#1101816).
• i40e: Fix display error code in dmesg (bsc#1109837 bsc#1111981 ).
• i40e: Fix for displaying message regarding NVM version (jsc#SLE-4797).
• i40e: Fix freeing of uninitialized misc IRQ vector (bsc#1101816 ).
• i40e: Fix ping is lost after configuring ADq on VF (bsc#1094978).
• i40e: Fix pre-set max number of queues for VF (bsc#1111981 ).
• i40e: Increase delay to 1 s after global EMP reset (bsc#1101816 ).
• iavf: Fix limit of total number of queues to active queues of VF (bsc#1111981).
• iavf: prevent accidental free of filter structure (bsc#1111981 ).
• ibmvnic: Allow queueing resets during probe (bsc#1196516