🛡️ SUSE-SU-2022:2078-1 — dtb-aarch64 (CVE-2022-0168 +13 more)
⚪ Unknown
✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10
Description
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated.
The following security bugs were fixed:
- CVE-2022-0168: Fixed a NULL pointer dereference in smb2_ioctl_query_info. (bsc#1197472)
- CVE-2022-20008: Fixed bug that allows to read kernel heap memory due to uninitialized data in mmc_blk_read_single of block.c. (bnc#1199564)
- CVE-2022-1972: Fixed a buffer overflow in nftable that could lead to privilege escalation. (bsc#1200019)
- CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266)
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
- CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577)
- CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
- CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426).
The following non-security bugs were fixed:
- ACPI: property: Release subnode properties with data nodes (git-fixes).
- ALSA: ctxfi: Add SB046x PCI ID (git-fixes).
- ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes (git-fixes).
- ALSA: hda - fix unused Realtek function when PM is not enabled (git-fixes).
- ALSA: hda/realtek - Add new type for ALC245 (git-fixes).
- ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS (git-fixes).
- ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop (git-fixes).
- ALSA: hda/realtek: Enable headset mic on Lenovo P360 (git-fixes).
- ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (git-fixes).
- ALSA: usb-audio: Add missing ep_idx in fixed EP quirks (git-fixes).
- ALSA: usb-audio: Clear MIDI port active flag after draining (git-fixes).
- ALSA: usb-audio: Configure sync endpoints before data (git-fixes).
- ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (git-fixes).
- ALSA: usb-audio: Restore Rane SL-1 quirk (git-fixes).
- ALSA: wavefront: Proper check of get_user() error (git-fixes).
- ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling (git-fixes)
- ARM: 9170/1: fix panic when kasan and kprobe are enabled (git-fixes)
- ARM: 9187/1: JIVE: fix return value of __setup handler (git-fixes)
- ARM: config: u8500: Re-enable AB8500 battery charging (git-fixes)
- ARM: davinci: da850-evm: Avoid NULL pointer dereference (git-fixes)
- ARM: dts: am3517-evm: Fix misc pinmuxing (git-fixes)
- ARM: dts: armada-38x: Add generic compatible to UART nodes (git-fixes)
- ARM: dts: at91: fix pinctrl phandles (git-fixes)
- ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek (git-fixes)
- ARM: dts: at91: sama5d2: Fix PMERRLOC resource size (git-fixes)
- ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name (git-fixes)
- ARM: dts: bcm2835-rpi-b: Fix GPIO line names (git-fixes)
- ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT (git-fixes)
- ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED (git-fixes)
- ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C (git-fixes)
- ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 (git-fixes)
- ARM: dts: Fix OpenBMC flash layout label addresses (git-fixes)
- ARM: dts: imx: Add missing LVDS decoder on M53Menlo (git-fixes)
- ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group (git-fixes)
- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue (git-fixes)
- ARM: dts: imx6qdl-udoo: Properly describe the SD card detect (git-fixes)
- ARM: dts: imx6ull-colibri: fix vqmmc regulator (git-fixes)
- ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name (git-fixes)
- ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 (git-fixes)
- ARM: dts: meson: Fix the UART compatible strings (git-fixes)
- ARM: dts: meson8: Fix the UAR
Affected software
SUSE-SU-2022:2078-1 is recorded against 14 packages.
- dtb-aarch64 (fixed in 5.3.18-150300.59.71.1)
- kernel-64kb (fixed in 5.3.18-150300.59.71.2)
- kernel-debug (fixed in 5.3.18-150300.59.71.2)
- kernel-default (fixed in 5.3.18-150300.59.71.2)
- kernel-default-base (fixed in 5.3.18-150300.59.71.2.150300.18.43.2)
- kernel-docs (fixed in 5.3.18-150300.59.71.2)
- kernel-kvmsmall (fixed in 5.3.18-150300.59.71.2)
- kernel-livepatch-sle15-sp3-update-19 (fixed in 1-150300.7.3.2)
- kernel-obs-build (fixed in 5.3.18-150300.59.71.2)
- kernel-obs-qa (fixed in 5.3.18-150300.59.71.1)
- kernel-preempt (fixed in 5.3.18-150300.59.71.2)
- kernel-source (fixed in 5.3.18-150300.59.71.2)
- kernel-syms (fixed in 5.3.18-150300.59.71.1)
- kernel-zfcpdump (fixed in 5.3.18-150300.59.71.2)
Timeline and source
Published on 14 June 2022 and last revised on 4 February 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.
References
www.suse.com (Advisory)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
Details
Severity
Unknown
CVSS Score
N/A
CVSS Vector
N/A
CWE
N/A
Public Exploit
✅ No
Source
OSV
Published
2022-06-14
Updated
2026-08-20
Modified
2026-02-04
Fix URL
N/A
Affected Packages
| Software | From version | Fixed in |
|---|---|---|
| dtb-aarch64 | — | 5.3.18-150300.59.71.1 |
| kernel-64kb | — | 5.3.18-150300.59.71.2 |
| kernel-debug | — | 5.3.18-150300.59.71.2 |
| kernel-default | — | 5.3.18-150300.59.71.2 |
| kernel-default-base | — | 5.3.18-150300.59.71.2.150300.18.43.2 |
| kernel-docs | — | 5.3.18-150300.59.71.2 |
| kernel-kvmsmall | — | 5.3.18-150300.59.71.2 |
| kernel-livepatch-sle15-sp3-update-19 | — | 1-150300.7.3.2 |
| kernel-obs-build | — | 5.3.18-150300.59.71.2 |
| kernel-obs-qa | — | 5.3.18-150300.59.71.1 |
| kernel-preempt | — | 5.3.18-150300.59.71.2 |
| kernel-source | — | 5.3.18-150300.59.71.2 |
| kernel-syms | — | 5.3.18-150300.59.71.1 |
| kernel-zfcpdump | — | 5.3.18-150300.59.71.2 |
References
Similar Threats
- Unknown openSUSE-SU-2026:21388-1
- Unknown openSUSE-SU-2026:20965-1
- Unknown openSUSE-SU-2026:20572-1
- Unknown openSUSE-SU-2026:20416-1
- Unknown openSUSE-SU-2026:20287-1
Free Vulnerability Check
Is your site affected by SUSE-SU-2022:2078-1?
BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against SUSE-SU-2022:2078-1 and other known CVE records.
Scan My Site Free →No credit card required · Results in minutes
ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.
