Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP2)

Announcement ID:	SUSE-SU-2022:3644-1
Rating:	important
References:	bsc#1203067 bsc#1203624 bsc#1203994 bsc#1204290 bsc#1204291 bsc#1204292
Cross-References:	CVE-2022-39189 CVE-2022-41222 CVE-2022-41674 CVE-2022-42719 CVE-2022-42720 CVE-2022-42721
CVSS scores:	CVE-2022-39189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-39189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-41222 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-41222 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-41674 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-41674 ( NVD ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2022-42719 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-42719 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-42720 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-42720 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-42721 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-42721 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products:	openSUSE Leap 15.3 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise Live Patching 15-SP2 SUSE Linux Enterprise Live Patching 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3

An update that solves six vulnerabilities can now be installed.

Description:

This update for the Linux Kernel 5.3.18-24_86 fixes several issues.

The following security issues were fixed:

• CVE-2022-41674: Fixed buffer overflow that can be triggered by injected WLAN frames (bsc#1203994).
• CVE-2022-42719: Fixed use-after-free in the mac80211 stack when parsing a multi-BSSID element (bsc#1204292).
• CVE-2022-42720: Fixed refcounting bugs in the multi-BSS handling of the mac80211 stack (bsc#1204291).
• CVE-2022-42721: Fixed list management bug in BSS handling of the mac80211 stack (bsc#1204290).
• CVE-2022-41222: Fixed a use-after-free via a stale TLB (bsc#1203624).
• CVE-2022-39189: Fixed mishandled TLB flush operation in certain KVM_VCPU_PREEMPTED situations (bsc#1203067).

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Live Patching 15-SP2
  zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2022-3644=1 SUSE-SLE-Module-Live-Patching-15-SP2-2022-3622=1 SUSE-SLE-Module-Live-Patching-15-SP2-2022-3623=1 SUSE-SLE-Module-Live-Patching-15-SP2-2022-3620=1 SUSE-SLE-Module-Live-Patching-15-SP2-2022-3624=1 SUSE-SLE-Module-Live-Patching-15-SP2-2022-3626=1 SUSE-SLE-Module-Live-Patching-15-SP2-2022-3625=1 SUSE-SLE-Module-Live-Patching-15-SP2-2022-3627=1 SUSE-SLE-Module-Live-Patching-15-SP2-2022-3618=1
• openSUSE Leap 15.3
  zypper in -t patch SUSE-2022-3648=1 SUSE-2022-3638=1 SUSE-2022-3649=1 SUSE-2022-3646=1 SUSE-2022-3639=1 SUSE-2022-3640=1 SUSE-2022-3657=1 SUSE-2022-3631=1 SUSE-2022-3645=1 SUSE-2022-3634=1 SUSE-2022-3641=1 SUSE-2022-3642=1 SUSE-2022-3643=1 SUSE-2022-3636=1 SUSE-2022-3606=1 SUSE-2022-3647=1
• SUSE Linux Enterprise Live Patching 15-SP3
  zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2022-3648=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3638=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3649=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3646=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3639=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3640=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3657=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3631=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3645=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3634=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3641=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3642=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3643=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3636=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3606=1 SUSE-SLE-Module-Live-Patching-15-SP3-2022-3647=1

Package List:

• SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64)
  • kernel-livepatch-SLE15-SP2_Update_29-debugsource-4-150200.2.1
  • kernel-livepatch-5_3_18-150200_24_112-default-9-150200.2.2
  • kernel-livepatch-5_3_18-150200_24_115-default-7-150200.2.1
  • kernel-livepatch-5_3_18-24_86-default-debuginfo-18-150200.2.2
  • kernel-livepatch-5_3_18-24_86-default-18-150200.2.2
  • kernel-livepatch-5_3_18-24_102-default-14-150200.2.2
  • kernel-livepatch-SLE15-SP2_Update_21-debugsource-17-150200.2.2
  • kernel-livepatch-5_3_18-150200_24_112-default-debuginfo-9-150200.2.2
  • kernel-livepatch-5_3_18-150200_24_126-default-debuginfo-4-150200.2.1
  • kernel-livepatch-SLE15-SP2_Update_20-debugsource-18-150200.2.2
  • kernel-livepatch-5_3_18-150200_24_115-default-debuginfo-7-150200.2.1
  • kernel-livepatch-5_3_18-24_99-default-debuginfo-15-150200.2.2
  • kernel-livepatch-5_3_18-24_107-default-13-150200.2.2
  • kernel-livepatch-5_3_18-24_102-default-debuginfo-14-150200.2.2
  • kernel-livepatch-5_3_18-24_96-default-debuginfo-16-150200.2.2
  • kernel-livepatch-5_3_18-24_93-default-debuginfo-17-150200.2.2
  • kernel-livepatch-SLE15-SP2_Update_22-debugsource-16-150200.2.2
  • kernel-livepatch-SLE15-SP2_Update_27-debugsource-7-150200.2.1
  • kernel-livepatch-5_3_18-24_96-default-16-150200.2.2
  • kernel-livepatch-SLE15-SP2_Update_23-debugsource-15-150200.2.2
  • kernel-livepatch-5_3_18-150200_24_126-default-4-150200.2.1
  • kernel-livepatch-SLE15-SP2_Update_26-debugsource-9-150200.2.2
  • kernel-livepatch-5_3_18-24_107-default-debuginfo-13-150200.2.2
  • kernel-livepatch-SLE15-SP2_Update_24-debugsource-14-150200.2.2
  • kernel-livepatch-5_3_18-24_93-default-17-150200.2.2
  • kernel-livepatch-5_3_18-24_99-default-15-150200.2.2
• SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le x86_64)
  • kernel-livepatch-SLE15-SP2_Update_25-debugsource-13-150200.2.2
• openSUSE Leap 15.3 (ppc64le s390x x86_64)
  • kernel-livepatch-5_3_18-150300_59_76-default-debuginfo-6-150300.2.1
  • kernel-livepatch-SLE15-SP3_Update_13-debugsource-15-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_63-default-9-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_43-default-debuginfo-15-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_68-default-debuginfo-8-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_10-debugsource-16-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_60-default-12-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_9-debugsource-17-150300.2.2
  • kernel-livepatch-5_3_18-59_37-default-16-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_71-default-debuginfo-7-150300.2.1
  • kernel-livepatch-SLE15-SP3_Update_19-debugsource-7-150300.2.1
  • kernel-livepatch-5_3_18-150300_59_68-default-8-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_46-default-15-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_24-debugsource-3-150300.2.1
  • kernel-livepatch-5_3_18-150300_59_87-default-debuginfo-5-150300.2.1
  • kernel-livepatch-SLE15-SP3_Update_14-debugsource-14-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_60-default-debuginfo-12-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_49-default-14-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_22-debugsource-5-150300.2.1
  • kernel-livepatch-5_3_18-150300_59_71-default-7-150300.2.1
  • kernel-livepatch-5_3_18-59_34-default-17-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_63-default-debuginfo-9-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_11-debugsource-16-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_18-debugsource-8-150300.2.2
  • kernel-livepatch-5_3_18-59_27-default-18-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_12-debugsource-15-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_90-default-debuginfo-4-150300.2.1
  • kernel-livepatch-5_3_18-59_34-default-debuginfo-17-150300.2.2
  • kernel-livepatch-5_3_18-59_40-default-debuginfo-16-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_7-debugsource-18-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_23-debugsource-4-150300.2.1
  • kernel-livepatch-5_3_18-150300_59_93-default-3-150300.2.1
  • kernel-livepatch-SLE15-SP3_Update_17-debugsource-9-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_49-default-debuginfo-14-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_54-default-debuginfo-13-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_20-debugsource-6-150300.2.1
  • kernel-livepatch-5_3_18-59_27-default-debuginfo-18-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_87-default-5-150300.2.1
  • kernel-livepatch-5_3_18-150300_59_90-default-4-150300.2.1
  • kernel-livepatch-SLE15-SP3_Update_16-debugsource-12-150300.2.2
  • kernel-livepatch-5_3_18-59_37-default-debuginfo-16-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_43-default-15-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_46-default-debuginfo-15-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_76-default-6-150300.2.1
  • kernel-livepatch-5_3_18-150300_59_93-default-debuginfo-3-150300.2.1
  • kernel-livepatch-5_3_18-59_40-default-16-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_54-default-13-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_15-debugsource-13-150300.2.2
• openSUSE Leap 15.3 (x86_64)
  • kernel-livepatch-5_3_18-150300_59_76-preempt-6-150300.2.1
  • kernel-livepatch-5_3_18-150300_59_54-preempt-13-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_49-preempt-debuginfo-14-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_76-preempt-debuginfo-6-150300.2.1
  • kernel-livepatch-5_3_18-59_37-preempt-debuginfo-16-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_54-preempt-debuginfo-13-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_63-preempt-9-150300.2.2
  • kernel-livepatch-5_3_18-59_40-preempt-16-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_43-preempt-debuginfo-15-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_60-preempt-debuginfo-12-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_90-preempt-debuginfo-4-150300.2.1
  • kernel-livepatch-5_3_18-59_34-preempt-debuginfo-17-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_49-preempt-14-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_63-preempt-debuginfo-9-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_87-preempt-5-150300.2.1
  • kernel-livepatch-5_3_18-59_37-preempt-16-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_68-preempt-debuginfo-8-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_93-preempt-debuginfo-3-150300.2.1
  • kernel-livepatch-5_3_18-150300_59_71-preempt-debuginfo-7-150300.2.1
  • kernel-livepatch-5_3_18-150300_59_46-preempt-debuginfo-15-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_60-preempt-12-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_71-preempt-7-150300.2.1
  • kernel-livepatch-5_3_18-150300_59_93-preempt-3-150300.2.1
  • kernel-livepatch-5_3_18-59_34-preempt-17-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_68-preempt-8-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_43-preempt-15-150300.2.2
  • kernel-livepatch-5_3_18-59_40-preempt-debuginfo-16-150300.2.2
  • kernel-livepatch-5_3_18-59_27-preempt-18-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_87-preempt-debuginfo-5-150300.2.1
  • kernel-livepatch-5_3_18-150300_59_90-preempt-4-150300.2.1
  • kernel-livepatch-5_3_18-59_27-preempt-debuginfo-18-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_46-preempt-15-150300.2.2
• SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64)
  • kernel-livepatch-5_3_18-150300_59_63-default-9-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_43-default-debuginfo-15-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_10-debugsource-16-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_60-default-12-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_9-debugsource-17-150300.2.2
  • kernel-livepatch-5_3_18-59_37-default-16-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_68-default-8-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_46-default-15-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_49-default-14-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_71-default-7-150300.2.1
  • kernel-livepatch-5_3_18-59_34-default-17-150300.2.2
  • kernel-livepatch-5_3_18-59_27-default-18-150300.2.2
  • kernel-livepatch-5_3_18-59_34-default-debuginfo-17-150300.2.2
  • kernel-livepatch-SLE15-SP3_Update_7-debugsource-18-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_93-default-3-150300.2.1
  • kernel-livepatch-5_3_18-59_27-default-debuginfo-18-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_87-default-5-150300.2.1
  • kernel-livepatch-5_3_18-150300_59_90-default-4-150300.2.1
  • kernel-livepatch-5_3_18-59_37-default-debuginfo-16-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_43-default-15-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_46-default-debuginfo-15-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_76-default-6-150300.2.1
  • kernel-livepatch-5_3_18-59_40-default-16-150300.2.2
  • kernel-livepatch-5_3_18-150300_59_54-default-13-150300.2.2
• SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le x86_64)
  • kernel-livepatch-5_3_18-59_40-default-debuginfo-16-150300.2.2

References:

• https://www.suse.com/security/cve/CVE-2022-39189.html
• https://www.suse.com/security/cve/CVE-2022-41222.html
• https://www.suse.com/security/cve/CVE-2022-41674.html
• https://www.suse.com/security/cve/CVE-2022-42719.html
• https://www.suse.com/security/cve/CVE-2022-42720.html
• https://www.suse.com/security/cve/CVE-2022-42721.html
• https://bugzilla.suse.com/show_bug.cgi?id=1203067
• https://bugzilla.suse.com/show_bug.cgi?id=1203624
• https://bugzilla.suse.com/show_bug.cgi?id=1203994
• https://bugzilla.suse.com/show_bug.cgi?id=1204290
• https://bugzilla.suse.com/show_bug.cgi?id=1204291
• https://bugzilla.suse.com/show_bug.cgi?id=1204292