SUSE-SU-2022:2721-1

    Dashboard / Vulnerabilities / SUSE-SU-2022:2721-1

    SUSE-SU-2022:2721-1

    Published: 9 Aug 2022Last Modified: 4 Feb 2026

    Summary: Security update for the Linux Kernel

    Details: The SUSE Linux Enterprise 12 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36946: Fixed an incorrect packet trucation operation which could lead to denial of service (bnc#1201940). - CVE-2022-20166: Fixed several possible memory safety issues due to unsafe operations (bsc#1200598). - CVE-2020-15393: Fixed a memory leak in the usbtest driver which could lead to denial of service (bnc#1173514). - CVE-2020-36558: Fixed a race condition involving VT_RESIZEX which could lead to a NULL pointer dereference and general protection fault (bnc#1200910). - CVE-2020-36557: Fixed a race condition between the VT_DISALLOCATE ioctl and closing/opening of TTYs could lead to a use-after-free (bnc#1201429). - CVE-2021-33656: Fixed memory out of bounds write related to ioctl cmd PIO_FONT (bnc#1201636). - CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635). - CVE-2022-1462: Fixed an out-of-bounds read flaw in the TTY subsystem (bnc#1198829). - CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762). - CVE-2022-2318: Fixed a use-after-free vulnerability in the timer handler in Rose subsystem that allowed unprivileged attackers to crash the system (bsc#1201251). - CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free (bnc#1196973). The following non-security bugs were fixed: - kvm: emulate: Do not adjust size of fastop and setcc subroutines (bsc#1201930). - kvm: emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).

    References: https://www.suse.com/support/update/announcement/2022/suse-su-20222721-1/, https://bugzilla.suse.com/1173514, https://bugzilla.suse.com/1196973, https://bugzilla.suse.com/1198829, https://bugzilla.suse.com/1200598, https://bugzilla.suse.com/1200762, https://bugzilla.suse.com/1200910, https://bugzilla.suse.com/1201251, https://bugzilla.suse.com/1201429, https://bugzilla.suse.com/1201635, https://bugzilla.suse.com/1201636, https://bugzilla.suse.com/1201742, https://bugzilla.suse.com/1201752, https://bugzilla.suse.com/1201930, https://bugzilla.suse.com/1201940, https://www.suse.com/security/cve/CVE-2020-15393, https://www.suse.com/security/cve/CVE-2020-36557, https://www.suse.com/security/cve/CVE-2020-36558, https://www.suse.com/security/cve/CVE-2021-33655, https://www.suse.com/security/cve/CVE-2021-33656, https://www.suse.com/security/cve/CVE-2021-39713, https://www.suse.com/security/cve/CVE-2022-1462, https://www.suse.com/security/cve/CVE-2022-20166, https://www.suse.com/security/cve/CVE-2022-2318, https://www.suse.com/security/cve/CVE-2022-26365, https://www.suse.com/security/cve/CVE-2022-33740, https://www.suse.com/security/cve/CVE-2022-33741, https://www.suse.com/security/cve/CVE-2022-33742, https://www.suse.com/security/cve/CVE-2022-36946

    Affected packages

    Package

    Name: kernel-default

    Purl: pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.4.121-92.181.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2022:2721-1 | CVE-DB