[LU-16547] kernel update [SLES12 SP5 4.12.14-122.147.1]

• Type: Improvement
• Resolution: Unresolved
• Priority: Minor
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various
security and bugfixes.

The following security bugs were fixed:

• CVE-2022-4662: Fixed a recursive locking violation in usb-storage that
  can cause the kernel to deadlock. (bsc#1206664)
• CVE-2022-3564: Fixed a bug which could lead to use after free, it was
  found in the function l2cap_reassemble_sdu of the file
  net/bluetooth/l2cap_core.c of the component Bluetooth. (bsc#1206073)
• CVE-2022-3108: Fixed a bug in kfd_parse_subtype_iolink in
  drivers/gpu/drm/amd/amdkfd/kfd_crat.c where a lack of check of the
  return value of kmemdup() could lead to a NULL pointer dereference.
  (bsc#1206389)
• CVE-2023-23454: Fixed a type confusion bug in the CBQ network scheduler
  which could lead to a use-after-free (bsc#1207036)
• CVE-2022-3107: Fixed a null pointer dereference caused by a missing
  check of the return value of kvmalloc_array. (bsc#1206395)

The following non-security bugs were fixed:
https://lists.suse.com/pipermail/sle-security-updates/2023-January/013526.html

Issue Links

• is related to: LU-16175 kernel update [SLES12 SP5 4.12.14-122.133.1]