[LU-15568] kernel update [SLES15 SP2 5.3.18-24.102.1]

• Type: Task
• Resolution: Won't Fix
• Priority: Minor
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

The following security bugs were fixed:

• CVE-2022-0435: Fixed remote stack overflow in net/tipc module that
  validate domain record count on input (bsc#1195254).
• CVE-2021-45095: Fixed refcount leak in pep_sock_accept in
  net/phonet/pep.c (bnc#1193867).
• CVE-2022-22942: Fixed stale file descriptors on failed usercopy
  (bsc#1195065).
• CVE-2021-22600: Fixed double free bug in packet_set_ring() in
  net/packet/af_packet.c that could have been exploited by a local user
  through crafted syscalls to escalate privileges or deny service
  (bnc#1195184).
• CVE-2021-39657: Fixed out of bounds read due to a missing bounds check
  in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local
  information disclosure with System execution privileges needed
  (bnc#1193864).
• CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a
  race condition in gadget_dev_desc_UDC_show of configfs.c. This could
  lead to local information disclosure with System execution privileges
  needed. User interaction is not needed for exploitation (bnc#1193861).
• CVE-2022-0330: Fixed flush TLBs before releasing backing store
  (bsc#1194880).

The following non-security bugs were fixed:
https://lists.suse.com/pipermail/sle-security-updates/2022-February/010211.html

Issue Links

• is related to: LU-15677 kernel update [SLES15 SP2 5.3.18-24.107.1]
• is related to: LU-15489 kernel update [SLES15 SP2 5.3.18-24.99.1]

Comments

[Jian Yu]

A new version is available in LU-15677.

[Gerrit Updater]

"Jian Yu <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/46558
Subject: LU-15568 kernel: kernel update SLES15 SP2 [5.3.18-24.102.1]
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 11394e0b0a859f9224801e2235d0417bcecdf8b5