{"schema_version":"1.7.3","id":"openSUSE-SU-2022:0768-1","published":"2022-03-09T09:09:29Z","modified":"2026-02-04T03:10:18.479826Z","related":["CVE-2021-44879","CVE-2022-0001","CVE-2022-0002","CVE-2022-0487","CVE-2022-0492","CVE-2022-0617","CVE-2022-0644","CVE-2022-0847","CVE-2022-24448","CVE-2022-24959"],"upstream":["CVE-2021-44879","CVE-2022-0001","CVE-2022-0002","CVE-2022-0487","CVE-2022-0492","CVE-2022-0617","CVE-2022-0644","CVE-2022-0847","CVE-2022-24448","CVE-2022-24959"],"summary":"Security update for the Linux Kernel","details":"The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\n\nTransient execution side-channel attacks attacking the Branch History Buffer (BHB),\nnamed 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.\n\nThe following security bugs were fixed:\n\n- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).\n- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).\n- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).\n- CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079)\n- CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd() (bsc#1196155).\n- CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987).\n- CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).\n- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).\n- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).\n- CVE-2022-24448: Fixed an issue in fs/nfs/dir.c. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).\n\n\nThe following non-security bugs were fixed:\n\n- crypto: af_alg - get_page upon reassignment to TX SGL (bsc#1195840).\n- lib/iov_iter: initialize 'flags' in new pipe_buffer (bsc#1196584).\n","affected":[{"package":{"name":"kernel-debug","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/kernel-debug&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-197.108.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-debug-base":"4.12.14-197.108.1","kernel-default-man":"4.12.14-197.108.1","kernel-kvmsmall-base":"4.12.14-197.108.1","kernel-vanilla":"4.12.14-197.108.1","kernel-vanilla-base":"4.12.14-197.108.1","kernel-vanilla-devel":"4.12.14-197.108.1","kernel-vanilla-livepatch-devel":"4.12.14-197.108.1","kernel-zfcpdump-man":"4.12.14-197.108.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0768-1.json"}},{"package":{"name":"kernel-default","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-197.108.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-debug-base":"4.12.14-197.108.1","kernel-default-man":"4.12.14-197.108.1","kernel-kvmsmall-base":"4.12.14-197.108.1","kernel-vanilla":"4.12.14-197.108.1","kernel-vanilla-base":"4.12.14-197.108.1","kernel-vanilla-devel":"4.12.14-197.108.1","kernel-vanilla-livepatch-devel":"4.12.14-197.108.1","kernel-zfcpdump-man":"4.12.14-197.108.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0768-1.json"}},{"package":{"name":"kernel-kvmsmall","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-197.108.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-debug-base":"4.12.14-197.108.1","kernel-default-man":"4.12.14-197.108.1","kernel-kvmsmall-base":"4.12.14-197.108.1","kernel-vanilla":"4.12.14-197.108.1","kernel-vanilla-base":"4.12.14-197.108.1","kernel-vanilla-devel":"4.12.14-197.108.1","kernel-vanilla-livepatch-devel":"4.12.14-197.108.1","kernel-zfcpdump-man":"4.12.14-197.108.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0768-1.json"}},{"package":{"name":"kernel-vanilla","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/kernel-vanilla&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-197.108.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-debug-base":"4.12.14-197.108.1","kernel-default-man":"4.12.14-197.108.1","kernel-kvmsmall-base":"4.12.14-197.108.1","kernel-vanilla":"4.12.14-197.108.1","kernel-vanilla-base":"4.12.14-197.108.1","kernel-vanilla-devel":"4.12.14-197.108.1","kernel-vanilla-livepatch-devel":"4.12.14-197.108.1","kernel-zfcpdump-man":"4.12.14-197.108.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0768-1.json"}},{"package":{"name":"kernel-zfcpdump","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.14-197.108.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-debug-base":"4.12.14-197.108.1","kernel-default-man":"4.12.14-197.108.1","kernel-kvmsmall-base":"4.12.14-197.108.1","kernel-vanilla":"4.12.14-197.108.1","kernel-vanilla-base":"4.12.14-197.108.1","kernel-vanilla-devel":"4.12.14-197.108.1","kernel-vanilla-livepatch-devel":"4.12.14-197.108.1","kernel-zfcpdump-man":"4.12.14-197.108.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0768-1.json"}}],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MWGLT5YBYSSX5MP2JBKT3N3QV2IWMC5F/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185973"},{"type":"REPORT","url":"https://bugzilla.suse.com/1191580"},{"type":"REPORT","url":"https://bugzilla.suse.com/1194516"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195536"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195543"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195612"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195840"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195897"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195908"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195949"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195987"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196079"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196155"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196584"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196612"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-44879"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0001"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0002"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0487"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0492"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0617"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0644"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-0847"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-24448"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-24959"}]}