Описание
Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_111 fixes several issues.
The following security issue was fixed:
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199602).
- Add missing module_mutex lock to module notifier for previous live patches (bsc#1199834).
Список пакетов
SUSE Linux Enterprise Live Patching 15 SP1
kernel-livepatch-4_12_14-150100_197_111-default-3-150100.2.2
Ссылки
- Link for SUSE-SU-2022:1949-1
- E-Mail link for SUSE-SU-2022:1949-1
- SUSE Security Ratings
- SUSE Bug 1199602
- SUSE Bug 1199834
- SUSE CVE CVE-2022-30594 page
Описание
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.
Затронутые продукты
SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_111-default-3-150100.2.2
Ссылки
- CVE-2022-30594
- SUSE Bug 1199505
- SUSE Bug 1199602
- SUSE Bug 1201549
- SUSE Bug 1204132