https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-15678 Lustre <p> The following security bugs were fixed:</p> <ul class="alternate" type="square"> <li>CVE-2022-0001: Fixed Branch History Injection vulnerability<br/> (bsc#1191580).</li> <li>CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability<br/> (bsc#1191580).</li> <li>CVE-2022-0847: Fixed a vulnerability were a local attackers could<br/> overwrite data in arbitrary (read-only) files (bsc#1196584).</li> <li>CVE-2022-25375: The RNDIS USB gadget lacks validation of the size of the<br/> RNDIS_MSG_SET command. Attackers can obtain sensitive information from<br/> kernel memory (bnc#1196235 ).</li> <li>CVE-2022-0492: Fixed a privilege escalation related to cgroups v1<br/> release_agent feature, which allowed bypassing namespace isolation<br/> unexpectedly (bsc#1195543).</li> <li>CVE-2022-0516: Fixed missing check in ioctl related to KVM in s390<br/> allows kernel memory read/write (bsc#1195516).</li> </ul> <p> The following non-security bugs were fixed:<br/> <a href="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010397.html" class="external-link" target="_blank" rel="nofollow noopener">https://lists.suse.com/pipermail/sle-security-updates/2022-March/010397.html</a></p> LU-15678

kernel update [SLES15 SP3 5.3.18-150300.59.54.1]

Improvement Minor Resolved Won't Fix Jian Yu Jian Yu Wed, 23 Mar 2022 05:59:06 +0000 Sat, 18 Jun 2022 00:11:45 +0000 Sat, 18 Jun 2022 00:11:45 +0000 0 2 <p>"Jian Yu &lt;yujian@whamcloud.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/46898" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/46898</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-15678" title="kernel update [SLES15 SP3 5.3.18-150300.59.54.1]" class="issue-link" data-issue-key="LU-15678"><del>LU-15678</del></a> kernel: kernel update SLES15 SP3 <span class="error">&#91;5.3.18-150300.59.54.1&#93;</span><br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 8ae56594f19a3827a8b90f47b491a8b6fcadfa1c</p> <p>A new version is in <a href="https://jira.whamcloud.com/browse/LU-15958" title="kernel update [SLES15 SP3 5.3.18-150300.59.71.2]" class="issue-link" data-issue-key="LU-15958"><del>LU-15958</del></a>.</p> Related LU-15569 LU-15772 Development Rank 1|i02lh3: Rank (Obsolete) 9223372036854775807