{"schema_version":"1.7.3","id":"SUSE-SU-2022:3930-1","published":"2022-11-10T09:24:50Z","modified":"2026-02-04T04:15:17.550110Z","related":["CVE-2021-4037","CVE-2022-2153","CVE-2022-2964","CVE-2022-3521","CVE-2022-3524","CVE-2022-3542","CVE-2022-3545","CVE-2022-3565","CVE-2022-3586","CVE-2022-3594","CVE-2022-3621","CVE-2022-3628","CVE-2022-3629","CVE-2022-3646","CVE-2022-3649","CVE-2022-43750"],"upstream":["CVE-2021-4037","CVE-2022-2153","CVE-2022-2964","CVE-2022-3521","CVE-2022-3524","CVE-2022-3542","CVE-2022-3545","CVE-2022-3565","CVE-2022-3586","CVE-2022-3594","CVE-2022-3621","CVE-2022-3628","CVE-2022-3629","CVE-2022-3646","CVE-2022-3649","CVE-2022-43750"],"summary":"Security update for the Linux Kernel","details":"\nThe SUSE Linux Enterprise 12 SP5 kernel RT was updated.\n\nThe following security bugs were fixed:\n\n- CVE-2022-3628: Fixed potential buffer overflow in  brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).\n- CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bnc#1198702).\n- CVE-2022-2153: Fixed vulnerability in KVM that could allow an unprivileged local attacker on the host to cause DoS (bnc#1200788).\n- CVE-2022-2964, CVE-2022-28748: Fixed memory corruption issues in ax88179_178a devices (bnc#1202686 bsc#1196018).\n- CVE-2022-3521: Fixed race condition in kcm_tx_work() in net/kcm/kcmsock.c (bnc#1204355).\n- CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bnc#1204354).\n- CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bnc#1204402).\n- CVE-2022-3545: Fixed use-after-free in area_cache_get() in drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bnc#1204415).\n- CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bnc#1204431).\n- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bnc#1204439).\n- CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bnc#1204479).\n- CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bnc#1204574).\n- CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bnc#1204635).\n- CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bnc#1204646).\n- CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bnc#1204647).\n- CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bnc#1204653).\n\nThe following non-security bugs were fixed:\n\n- amd-xgbe: Update DMA coherency values (git-fixes).\n- bnxt: do not lock the tx queue from napi poll (git-fixes).\n- bnxt_en: Fix RX consumer index logic in the error path (git-fixes).\n- bnxt_en: reverse order of TX disable and carrier off (git-fixes).\n- ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read() (git-fixes).\n- ftrace: Fix char print issue in print_ip_ins() (git-fixes).\n- i40e: Fix flow for IPv6 next header (extension header) (git-fixes).\n- i40e: Fix overwriting flow control settings during driver loading (git-fixes).\n- i40e: improve locking of mac_filter_hash (git-fixes).\n- input: gscps2 - check return value of ioremap() in gscps2_probe() (git-fixes).\n- input: xpad - add supported devices as contributed on github (git-fixes).\n- ip6: fix skb leak in ip6frag_expire_frag_queue (bsc#1202972)\n- kABI: Fix after adding trace_iterator.wait_index (git-fixes).\n- memcg, kmem: do not fail __GFP_NOFAIL charges (bsc#1204755).\n- net/mlx4: Fix EEPROM dump support (git-fixes).\n- net/mlx4_core: Add missed mlx4_free_cmd_mailbox() (git-fixes).\n- net/mlx5e: Remove dependency in IPsec initialization flows (git-fixes).\n- net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning (git-fixes).\n- net: amd-xgbe: Fix network fluctuations when using 1G BELFUSE SFP (git-fixes).\n- net: amd-xgbe: Reset link when the link never comes back (git-fixes).\n- net: dsa: mt7530: add the missing RxUnicast MIB counter (git-fixes).\n- net: ethernet: ezchip: fix UAF in nps_enet_remove (git-fixes).\n- net: lapbether: Prevent racing when checking whether the netif is running (git-fixes).\n- net: marvell: fix MVNETA_TX_IN_PRGRS bit number (git-fixes).\n- net: mvpp2: Put fwnode in error case during ->probe() (git-fixes).\n- net: stmmac: fix watchdog timeout during suspend/resume stress test (git-fixes).\n- net: stmmac: stop each tx channel independently (git-fixes).\n- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (git-fixes).\n- net: vxge: fix use-after-free in vxge_device_unregister (git-fixes).\n- nvmem: core: Check input parameter for NULL in nvmem_unregister() (bsc#1204241).\n- powerpc/mm/64s: Drop pgd_huge() (bsc#1065729).\n- powerpc/mm: remove pmd_huge/pud_huge stubs and include hugetlb.h (bsc#1065729).\n- powerpc/pci_dn: Add missing of_node_put() (bsc#1065729).\n- powerpc/powernv: add missing of_node_put() in opal_export_attrs() (bsc#1065729).\n- ppp: Fix generating ifname when empty IFLA_IFNAME is specified (git-fixes).\n- ppp: Fix generating ppp unit id when ifname is not specified (git-fixes).\n- quota: widen timestamps for the fs_disk_quota structure (bsc#1203387).\n- r8169: fix jumbo packet handling on RTL8168e (git-fixes).\n- revert 'niu: fix missing checks of niu_pci_eeprom_read' (git-fixes).\n- ring-buffer: Add ring_buffer_wake_waiters() (git-fixes).\n- ring-buffer: Check pending waiters when doing wake ups as well (git-fixes).\n- ring-buffer: Fix race between reset page and reading page (git-fixes).\n- tracing: Add ioctl() to force ring buffer waiters to wake up (git-fixes).\n- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (git-fixes).\n- tracing: Do not free snapshot if tracer is on cmdline (git-fixes).\n- tracing: Simplify conditional compilation code in tracing_set_tracer() (git-fixes).\n- tracing: Wake up ring buffer waiters on closing of the file (git-fixes).\n- tracing: Wake up waiters when tracing is disabled (git-fixes).\n- usb: core: Fix RST error in hub.c (git-fixes).\n- usb: serial: ch341: add basis for quirk detection (git-fixes).\n- usb: serial: ch341: fix lockup of devices with limited prescaler (git-fixes).\n- usb: serial: ch341: fix lost character on LCR updates (git-fixes).\n- usb: serial: ch341: fix receiver regression (git-fixes).\n- usb: serial: ch341: reimplement line-speed handling (git-fixes).\n- usb: serial: cp210x: add Decagon UCA device id (git-fixes).\n- usb: serial: ftdi_sio: add Omron CS1W-CIF31 device id (git-fixes).\n- usb: serial: option: add Quectel EM060K modem (git-fixes).\n- usb: serial: option: add support for OPPO R11 diag port (git-fixes).\n- xfs: account finobt blocks properly in perag reservation (bsc#1203387).\n- xfs: enable big timestamps (bsc#1203387).\n- xfs: enable new inode btree counters feature (bsc#1203387).\n- xfs: explicitly define inode timestamp range (bsc#1203387).\n- xfs: preserve default grace interval during quotacheck (bsc#1203387).\n- xfs: quota: move to time64_t interfaces (bsc#1203387).\n- xfs: redefine xfs_ictimestamp_t (bsc#1203387).\n- xfs: redefine xfs_timestamp_t (bsc#1203387).\n- xfs: store inode btree block counts in AGI header (bsc#1203387).\n- xfs: use a struct timespec64 for the in-core crtime (bsc#1203387).\n- xfs: use the finobt block counts to speed up mount times (bsc#1203387).\n- xfs: widen ondisk inode timestamps to deal with y2038+ (bsc#1203387).\n- xfs: widen ondisk quota expiration timestamps to handle y2038+ (bsc#1203387).\n","affected":[{"package":{"name":"kernel-rt","ecosystem":"SUSE:Linux Enterprise Real Time 12 SP5","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-10.106.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"4.12.14-10.106.1","dlm-kmp-rt":"4.12.14-10.106.1","gfs2-kmp-rt":"4.12.14-10.106.1","kernel-devel-rt":"4.12.14-10.106.1","kernel-rt":"4.12.14-10.106.1","kernel-rt-base":"4.12.14-10.106.1","kernel-rt-devel":"4.12.14-10.106.1","kernel-rt_debug":"4.12.14-10.106.1","kernel-rt_debug-devel":"4.12.14-10.106.1","kernel-source-rt":"4.12.14-10.106.1","kernel-syms-rt":"4.12.14-10.106.1","ocfs2-kmp-rt":"4.12.14-10.106.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3930-1.json"}},{"package":{"name":"kernel-rt_debug","ecosystem":"SUSE:Linux Enterprise Real Time 12 SP5","purl":"pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-10.106.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"4.12.14-10.106.1","dlm-kmp-rt":"4.12.14-10.106.1","gfs2-kmp-rt":"4.12.14-10.106.1","kernel-devel-rt":"4.12.14-10.106.1","kernel-rt":"4.12.14-10.106.1","kernel-rt-base":"4.12.14-10.106.1","kernel-rt-devel":"4.12.14-10.106.1","kernel-rt_debug":"4.12.14-10.106.1","kernel-rt_debug-devel":"4.12.14-10.106.1","kernel-source-rt":"4.12.14-10.106.1","kernel-syms-rt":"4.12.14-10.106.1","ocfs2-kmp-rt":"4.12.14-10.106.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3930-1.json"}},{"package":{"name":"kernel-source-rt","ecosystem":"SUSE:Linux Enterprise Real Time 12 SP5","purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-10.106.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"4.12.14-10.106.1","dlm-kmp-rt":"4.12.14-10.106.1","gfs2-kmp-rt":"4.12.14-10.106.1","kernel-devel-rt":"4.12.14-10.106.1","kernel-rt":"4.12.14-10.106.1","kernel-rt-base":"4.12.14-10.106.1","kernel-rt-devel":"4.12.14-10.106.1","kernel-rt_debug":"4.12.14-10.106.1","kernel-rt_debug-devel":"4.12.14-10.106.1","kernel-source-rt":"4.12.14-10.106.1","kernel-syms-rt":"4.12.14-10.106.1","ocfs2-kmp-rt":"4.12.14-10.106.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3930-1.json"}},{"package":{"name":"kernel-syms-rt","ecosystem":"SUSE:Linux Enterprise Real Time 12 SP5","purl":"pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-10.106.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-rt":"4.12.14-10.106.1","dlm-kmp-rt":"4.12.14-10.106.1","gfs2-kmp-rt":"4.12.14-10.106.1","kernel-devel-rt":"4.12.14-10.106.1","kernel-rt":"4.12.14-10.106.1","kernel-rt-base":"4.12.14-10.106.1","kernel-rt-devel":"4.12.14-10.106.1","kernel-rt_debug":"4.12.14-10.106.1","kernel-rt_debug-devel":"4.12.14-10.106.1","kernel-source-rt":"4.12.14-10.106.1","kernel-syms-rt":"4.12.14-10.106.1","ocfs2-kmp-rt":"4.12.14-10.106.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3930-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223930-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1065729"},{"type":"REPORT","url":"https://bugzilla.suse.com/1198702"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200788"},{"type":"REPORT","url":"https://bugzilla.suse.com/1202686"},{"type":"REPORT","url":"https://bugzilla.suse.com/1202972"},{"type":"REPORT","url":"https://bugzilla.suse.com/1203387"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204241"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204354"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204355"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204402"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204415"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204431"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204439"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204479"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204574"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204635"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204646"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204647"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204653"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204755"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204868"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-4037"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-2153"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-2964"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3521"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3524"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3542"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3545"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3565"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3586"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3594"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3621"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3628"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3629"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3646"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-3649"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-43750"}]}