{"schema_version":"1.7.3","id":"SUSE-SU-2022:0757-1","published":"2022-03-08T18:04:15Z","modified":"2026-02-04T02:21:31.816769Z","related":["CVE-2021-44879","CVE-2022-0001","CVE-2022-0002","CVE-2022-0487","CVE-2022-0492","CVE-2022-0617","CVE-2022-0644","CVE-2022-0847","CVE-2022-24448","CVE-2022-24959"],"upstream":["CVE-2021-44879","CVE-2022-0001","CVE-2022-0002","CVE-2022-0487","CVE-2022-0492","CVE-2022-0617","CVE-2022-0644","CVE-2022-0847","CVE-2022-24448","CVE-2022-24959"],"summary":"Security update for the Linux Kernel","details":"The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.\n\n\nTransient execution side-channel attacks attacking the Branch History Buffer (BHB),\nnamed 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.\n\nThe following security bugs were fixed:\n\n- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).\n- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).\n- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).\n- CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079)\n- CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd() (bsc#1196155).\n- CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987).\n- CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).\n- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).\n- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).\n- CVE-2022-24448: Fixed an issue in fs/nfs/dir.c. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).\n\nThe following non-security bugs were fixed:\n\n- NFSv4.x: by default serialize open/close operations (bsc#1114893 bsc#1195934).\n- crypto: af_alg - get_page upon reassignment to TX SGL (bsc#1195840).\n- hv_netvsc: fix network namespace issues with VF support (bsc#1107207).\n- hv_netvsc: move VF to same namespace as netvsc device (bsc#1107207).\n- lib/iov_iter: initialize 'flags' in new pipe_buffer (bsc#1196584).\n","affected":[{"package":{"name":"kernel-default","ecosystem":"SUSE:OpenStack Cloud 9","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.93.1","kernel-default-base":"4.12.14-95.93.1","kernel-default-devel":"4.12.14-95.93.1","kernel-devel":"4.12.14-95.93.1","kernel-macros":"4.12.14-95.93.1","kernel-source":"4.12.14-95.93.1","kernel-syms":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:OpenStack Cloud 9","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.93.1","kernel-default-base":"4.12.14-95.93.1","kernel-default-devel":"4.12.14-95.93.1","kernel-devel":"4.12.14-95.93.1","kernel-macros":"4.12.14-95.93.1","kernel-source":"4.12.14-95.93.1","kernel-syms":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:OpenStack Cloud 9","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.93.1","kernel-default-base":"4.12.14-95.93.1","kernel-default-devel":"4.12.14-95.93.1","kernel-devel":"4.12.14-95.93.1","kernel-macros":"4.12.14-95.93.1","kernel-source":"4.12.14-95.93.1","kernel-syms":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.93.1","kernel-default-base":"4.12.14-95.93.1","kernel-default-devel":"4.12.14-95.93.1","kernel-devel":"4.12.14-95.93.1","kernel-macros":"4.12.14-95.93.1","kernel-source":"4.12.14-95.93.1","kernel-syms":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.93.1","kernel-default-base":"4.12.14-95.93.1","kernel-default-devel":"4.12.14-95.93.1","kernel-devel":"4.12.14-95.93.1","kernel-macros":"4.12.14-95.93.1","kernel-source":"4.12.14-95.93.1","kernel-syms":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.93.1","kernel-default-base":"4.12.14-95.93.1","kernel-default-devel":"4.12.14-95.93.1","kernel-devel":"4.12.14-95.93.1","kernel-macros":"4.12.14-95.93.1","kernel-source":"4.12.14-95.93.1","kernel-syms":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP4","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-default":"4.12.14-95.93.1","dlm-kmp-default":"4.12.14-95.93.1","gfs2-kmp-default":"4.12.14-95.93.1","ocfs2-kmp-default":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Live Patching 12 SP4","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-kgraft":"4.12.14-95.93.1","kernel-default-kgraft-devel":"4.12.14-95.93.1","kgraft-patch-4_12_14-95_93-default":"1-6.5.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kgraft-patch-SLE12-SP4_Update_25","ecosystem":"SUSE:Linux Enterprise Live Patching 12 SP4","purl":"pkg:rpm/suse/kgraft-patch-SLE12-SP4_Update_25&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-6.5.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-kgraft":"4.12.14-95.93.1","kernel-default-kgraft-devel":"4.12.14-95.93.1","kgraft-patch-4_12_14-95_93-default":"1-6.5.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.93.1","kernel-default-base":"4.12.14-95.93.1","kernel-default-devel":"4.12.14-95.93.1","kernel-devel":"4.12.14-95.93.1","kernel-macros":"4.12.14-95.93.1","kernel-source":"4.12.14-95.93.1","kernel-syms":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.93.1","kernel-default-base":"4.12.14-95.93.1","kernel-default-devel":"4.12.14-95.93.1","kernel-devel":"4.12.14-95.93.1","kernel-macros":"4.12.14-95.93.1","kernel-source":"4.12.14-95.93.1","kernel-syms":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.93.1","kernel-default-base":"4.12.14-95.93.1","kernel-default-devel":"4.12.14-95.93.1","kernel-devel":"4.12.14-95.93.1","kernel-macros":"4.12.14-95.93.1","kernel-source":"4.12.14-95.93.1","kernel-syms":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.93.1","kernel-default-base":"4.12.14-95.93.1","kernel-default-devel":"4.12.14-95.93.1","kernel-default-man":"4.12.14-95.93.1","kernel-devel":"4.12.14-95.93.1","kernel-macros":"4.12.14-95.93.1","kernel-source":"4.12.14-95.93.1","kernel-syms":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.93.1","kernel-default-base":"4.12.14-95.93.1","kernel-default-devel":"4.12.14-95.93.1","kernel-default-man":"4.12.14-95.93.1","kernel-devel":"4.12.14-95.93.1","kernel-macros":"4.12.14-95.93.1","kernel-source":"4.12.14-95.93.1","kernel-syms":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.93.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.93.1","kernel-default-base":"4.12.14-95.93.1","kernel-default-devel":"4.12.14-95.93.1","kernel-default-man":"4.12.14-95.93.1","kernel-devel":"4.12.14-95.93.1","kernel-macros":"4.12.14-95.93.1","kernel-source":"4.12.14-95.93.1","kernel-syms":"4.12.14-95.93.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0757-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220757-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1107207"},{"type":"REPORT","url":"https://bugzilla.suse.com/1114893"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185973"},{"type":"REPORT","url":"https://bugzilla.suse.com/1191580"},{"type":"REPORT","url":"https://bugzilla.suse.com/1194516"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195536"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195543"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195612"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195840"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195897"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195908"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195934"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195949"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195987"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196079"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196155"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196584"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196601"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196612"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-44879"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0001"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0002"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0487"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0492"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0617"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0644"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0847"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-24448"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-24959"}]}