🛡️ SUSE-SU-2022:2722-1 — kernel-azure (CVE-2021-33655 +4 more)

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
• CVE-2022-1462: Fixed an out-of-bounds read flaw in the TeleTYpe subsystem (bnc#1198829).
• CVE-2022-21505: Fixed kexec lockdown bypass with IMA policy (bsc#1201458).
• CVE-2022-29581: Fixed improper update of Reference Count in net/sched that could cause root privilege escalation (bnc#1199665).
• CVE-2022-32250: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a privilege escalation issue (bnc#1200015, bnc#1200494).

The following non-security bugs were fixed:

• 9p: Fix refcounting during full path walks for fid lookups (git-fixes).
• 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl (git-fixes).
• 9p: fix fid refcount leak in v9fs_vfs_get_link (git-fixes).
• ACPI: CPPC: Only probe for _CPC if CPPC v2 is acked (git-fixes).
• ACPI: video: Fix acpi_video_handles_brightness_key_presses() (git-fixes).
• ALSA: hda - Add fixup for Dell Latitidue E5430 (git-fixes).
• ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model (git-fixes).
• ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (git-fixes).
• ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 (git-fixes).
• ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (git-fixes).
• ALSA: hda/realtek: Add quirk for Clevo L140PU (git-fixes).
• ALSA: hda/realtek: Fix headset mic for Acer SF313-51 (git-fixes).
• ALSA: hda/realtek: fix mute/micmute LEDs for HP machines (git-fixes).
• ALSA: usb-audio: Add quirk for Fiero SC-01 (fw v1.0.0) (git-fixes).
• ALSA: usb-audio: Add quirk for Fiero SC-01 (git-fixes).
• ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices (git-fixes).
• ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD (git-fixes).
• ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle (git-fixes).
• ARM: 9210/1: Mark the FDT_FIXED sections as shareable (git-fixes).
• ARM: 9213/1: Print message about disabled Spectre workarounds only once (git-fixes).
• ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction (git-fixes).
• ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow (git-fixes).
• ARM: dts: at91: sama5d2: Fix typo in i2s1 node (git-fixes).
• ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count (git-fixes).
• ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 (git-fixes).
• ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero (git-fixes).
• ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array (git-fixes).
• ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() (git-fixes).
• ASoC: Intel: bytcr_wm5102: Fix GPIO related probe-ordering problem (git-fixes).
• ASoC: Intel: sof_sdw: handle errors on card registration (git-fixes).
• ASoC: Realtek/Maxim SoundWire codecs: disable pm_runtime on remove (git-fixes).
• ASoC: Remove unused hw_write_t type (git-fixes).
• ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow (git-fixes).
• ASoC: codecs: rt700/rt711/rt711-sdca: initialize workqueues in probe (git-fixes).
• ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect (git-fixes).
• ASoC: cs47l15: Fix event generation for low power mux control (git-fixes).
• ASoC: dapm: Initialise kcontrol data for mux/demux controls (git-fixes).
• ASoC: madera: Fix event generation for OUT1 demux (git-fixes).
• ASoC: madera: Fix event generation for rate controls (git-fixes).
• ASoC: ops: Fix off by one in range control validation (git-fixes).
• ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend (git-fixes).
• ASoC: rt5682: Fix deadlock on resume (git-fixes).
• ASoC: rt5682: Re-detect the combo jack after resuming (git-fixes).
• ASoC: rt5682: fix an incorrect NULL check on list iterator (git-fixes).
• ASoC: rt5682: move clk related code to rt5682_i2c_probe (git-fixes).
• ASoC: rt7*-sdw: harden jack_detect_handler (git-fixes).
• ASoC: rt711-sdca-sdw: fix calibrate mutex initialization (git-fixes).
• ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver (git-fixes).
• ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error (git-fixes).
• ASoC: rt711: Add endianness flag in snd_soc_component_driver (git-fixes).
• ASoC: rt711: fix calibrate mutex initialization (git-fixes).
• ASoC: sgtl5000: Fix noise on shutdown/remove (git-fixes).
• ASoC: tas2764: Add post reset delays (git-fixes).
• ASoC: tas2764: Correct playback volume range (git-fixes).
• ASoC: tas2764: Fix amp gain register offset & default (git-fixes).
• ASoC: tas2764: Fix and extend FSYNC polarity handling (git-fixes).
• ASoC: wcd938x: Fix event generation for some controls (git-fixes).
• ASoC: wm5110: Fix DRE control (git-fixes).
• Bluet