Описание
Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_96 fixes several issues.
The following security issue was fixed:
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199602).
- Add missing module_mutex lock to module notifier for previous live patches (bsc#1199834).
Список пакетов
SUSE Linux Enterprise Live Patching 12 SP4
kgraft-patch-4_12_14-95_96-default-3-2.2
Ссылки
- Link for SUSE-SU-2022:1940-1
- E-Mail link for SUSE-SU-2022:1940-1
- SUSE Security Ratings
- SUSE Bug 1199602
- SUSE Bug 1199834
- SUSE CVE CVE-2022-30594 page
Описание
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.
Затронутые продукты
SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_96-default-3-2.2
Ссылки
- CVE-2022-30594
- SUSE Bug 1199505
- SUSE Bug 1199602
- SUSE Bug 1201549
- SUSE Bug 1204132