{"schema_version":"1.7.3","id":"SUSE-SU-2022:2393-1","published":"2022-07-14T07:27:37Z","modified":"2026-02-04T03:05:03.323551Z","related":["CVE-2019-19377","CVE-2020-26541","CVE-2021-26341","CVE-2021-4157","CVE-2022-1184","CVE-2022-1679","CVE-2022-1729","CVE-2022-1974","CVE-2022-1975","CVE-2022-20132","CVE-2022-20141","CVE-2022-20154","CVE-2022-21499","CVE-2022-2318","CVE-2022-26365","CVE-2022-29900","CVE-2022-29901","CVE-2022-33740","CVE-2022-33741","CVE-2022-33742","CVE-2022-33981"],"upstream":["CVE-2019-19377","CVE-2020-26541","CVE-2021-26341","CVE-2021-4157","CVE-2022-1184","CVE-2022-1679","CVE-2022-1729","CVE-2022-1974","CVE-2022-1975","CVE-2022-20132","CVE-2022-20141","CVE-2022-20154","CVE-2022-21499","CVE-2022-2318","CVE-2022-26365","CVE-2022-29900","CVE-2022-29901","CVE-2022-33740","CVE-2022-33741","CVE-2022-33742","CVE-2022-33981"],"summary":"Security update for the Linux Kernel","details":"The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).\n- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).\n- CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).\n- CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692)\n- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).\n- CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013).\n- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).\n- CVE-2022-2318: Fixed a use-after-free vulnerabilities in the timer handler in net/rose/rose_timer.c that allow attackers to crash the system without any privileges (bsc#1201251).\n- CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762).\n- CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).\n- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bsc#1177282)\n- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space (bsc#1200144).\n- CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device from user-space (bsc#1200143).\n- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).\n- CVE-2022-1184: Fixed a use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (bsc#1198577).\n- CVE-2022-21499: Lock down kgdb to prohibit secure-boot bypass (bsc#1199426).\n- CVE-2019-19377: Fixed a user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image (bsc#1158266).\n\nThe following non-security bugs were fixed:\n\n- btrfs: tree-checker: fix incorrect printk format (bsc#1200249).\n- exec: Force single empty string when argv is empty (bsc#1200571).\n","affected":[{"package":{"name":"kernel-default","ecosystem":"SUSE:OpenStack Cloud 9","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.102.1","kernel-default-base":"4.12.14-95.102.1","kernel-default-devel":"4.12.14-95.102.1","kernel-devel":"4.12.14-95.102.1","kernel-macros":"4.12.14-95.102.1","kernel-source":"4.12.14-95.102.1","kernel-syms":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:OpenStack Cloud 9","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.102.1","kernel-default-base":"4.12.14-95.102.1","kernel-default-devel":"4.12.14-95.102.1","kernel-devel":"4.12.14-95.102.1","kernel-macros":"4.12.14-95.102.1","kernel-source":"4.12.14-95.102.1","kernel-syms":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:OpenStack Cloud 9","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.102.1","kernel-default-base":"4.12.14-95.102.1","kernel-default-devel":"4.12.14-95.102.1","kernel-devel":"4.12.14-95.102.1","kernel-macros":"4.12.14-95.102.1","kernel-source":"4.12.14-95.102.1","kernel-syms":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.102.1","kernel-default-base":"4.12.14-95.102.1","kernel-default-devel":"4.12.14-95.102.1","kernel-devel":"4.12.14-95.102.1","kernel-macros":"4.12.14-95.102.1","kernel-source":"4.12.14-95.102.1","kernel-syms":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.102.1","kernel-default-base":"4.12.14-95.102.1","kernel-default-devel":"4.12.14-95.102.1","kernel-devel":"4.12.14-95.102.1","kernel-macros":"4.12.14-95.102.1","kernel-source":"4.12.14-95.102.1","kernel-syms":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.102.1","kernel-default-base":"4.12.14-95.102.1","kernel-default-devel":"4.12.14-95.102.1","kernel-devel":"4.12.14-95.102.1","kernel-macros":"4.12.14-95.102.1","kernel-source":"4.12.14-95.102.1","kernel-syms":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP4","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-default":"4.12.14-95.102.1","dlm-kmp-default":"4.12.14-95.102.1","gfs2-kmp-default":"4.12.14-95.102.1","ocfs2-kmp-default":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Live Patching 12 SP4","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-kgraft":"4.12.14-95.102.1","kernel-default-kgraft-devel":"4.12.14-95.102.1","kgraft-patch-4_12_14-95_102-default":"1-6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kgraft-patch-SLE12-SP4_Update_28","ecosystem":"SUSE:Linux Enterprise Live Patching 12 SP4","purl":"pkg:rpm/suse/kgraft-patch-SLE12-SP4_Update_28&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-6.3.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default-kgraft":"4.12.14-95.102.1","kernel-default-kgraft-devel":"4.12.14-95.102.1","kgraft-patch-4_12_14-95_102-default":"1-6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.102.1","kernel-default-base":"4.12.14-95.102.1","kernel-default-devel":"4.12.14-95.102.1","kernel-devel":"4.12.14-95.102.1","kernel-macros":"4.12.14-95.102.1","kernel-source":"4.12.14-95.102.1","kernel-syms":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.102.1","kernel-default-base":"4.12.14-95.102.1","kernel-default-devel":"4.12.14-95.102.1","kernel-devel":"4.12.14-95.102.1","kernel-macros":"4.12.14-95.102.1","kernel-source":"4.12.14-95.102.1","kernel-syms":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.102.1","kernel-default-base":"4.12.14-95.102.1","kernel-default-devel":"4.12.14-95.102.1","kernel-devel":"4.12.14-95.102.1","kernel-macros":"4.12.14-95.102.1","kernel-source":"4.12.14-95.102.1","kernel-syms":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.102.1","kernel-default-base":"4.12.14-95.102.1","kernel-default-devel":"4.12.14-95.102.1","kernel-default-man":"4.12.14-95.102.1","kernel-devel":"4.12.14-95.102.1","kernel-macros":"4.12.14-95.102.1","kernel-source":"4.12.14-95.102.1","kernel-syms":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.102.1","kernel-default-base":"4.12.14-95.102.1","kernel-default-devel":"4.12.14-95.102.1","kernel-default-man":"4.12.14-95.102.1","kernel-devel":"4.12.14-95.102.1","kernel-macros":"4.12.14-95.102.1","kernel-source":"4.12.14-95.102.1","kernel-syms":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-95.102.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.12.14-95.102.1","kernel-default-base":"4.12.14-95.102.1","kernel-default-devel":"4.12.14-95.102.1","kernel-default-man":"4.12.14-95.102.1","kernel-devel":"4.12.14-95.102.1","kernel-macros":"4.12.14-95.102.1","kernel-source":"4.12.14-95.102.1","kernel-syms":"4.12.14-95.102.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2393-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1158266"},{"type":"REPORT","url":"https://bugzilla.suse.com/1162338"},{"type":"REPORT","url":"https://bugzilla.suse.com/1162369"},{"type":"REPORT","url":"https://bugzilla.suse.com/1173871"},{"type":"REPORT","url":"https://bugzilla.suse.com/1177282"},{"type":"REPORT","url":"https://bugzilla.suse.com/1194013"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196901"},{"type":"REPORT","url":"https://bugzilla.suse.com/1198577"},{"type":"REPORT","url":"https://bugzilla.suse.com/1199426"},{"type":"REPORT","url":"https://bugzilla.suse.com/1199487"},{"type":"REPORT","url":"https://bugzilla.suse.com/1199507"},{"type":"REPORT","url":"https://bugzilla.suse.com/1199657"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200059"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200143"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200144"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200249"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200571"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200599"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200604"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200605"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200608"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200619"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200692"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200762"},{"type":"REPORT","url":"https://bugzilla.suse.com/1201050"},{"type":"REPORT","url":"https://bugzilla.suse.com/1201080"},{"type":"REPORT","url":"https://bugzilla.suse.com/1201251"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19377"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-26541"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-26341"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-4157"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-1184"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-1679"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-1729"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-1974"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-1975"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-20132"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-20141"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-20154"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-21499"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-2318"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-26365"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-29900"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-29901"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-33740"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-33741"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-33742"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-33981"}]}