|
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various
security and bugfixes.
The following security bugs were fixed:
- CVE-2022-4662: Fixed a recursive locking violation in usb-storage that
can cause the kernel to deadlock. (bsc#1206664)
- CVE-2022-3564: Fixed a bug which could lead to use after free, it was
found in the function l2cap_reassemble_sdu of the file
net/bluetooth/l2cap_core.c of the component Bluetooth. (bsc#1206073)
- CVE-2022-3108: Fixed a bug in kfd_parse_subtype_iolink in
drivers/gpu/drm/amd/amdkfd/kfd_crat.c where a lack of check of the
return value of kmemdup() could lead to a NULL pointer dereference.
(bsc#1206389)
- CVE-2023-23454: Fixed a type confusion bug in the CBQ network scheduler
which could lead to a use-after-free (bsc#1207036)
- CVE-2022-3107: Fixed a null pointer dereference caused by a missing
check of the return value of kvmalloc_array. (bsc#1206395)
The following non-security bugs were fixed:
https://lists.suse.com/pipermail/sle-security-updates/2023-January/013526.html
|