Описание
Security update for the Linux Kernel (Live Patch 44 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_161 fixes several issues.
The following security issue was fixed:
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199602).
- Add missing module_mutex lock to module notifier for previous live patches (bsc#1199834).
Список пакетов
SUSE Linux Enterprise Server 12 SP3-LTSS
kgraft-patch-4_4_180-94_161-default-3-2.2
SUSE Linux Enterprise Server for SAP Applications 12 SP3
kgraft-patch-4_4_180-94_161-default-3-2.2
Ссылки
- Link for SUSE-SU-2022:2010-1
- E-Mail link for SUSE-SU-2022:2010-1
- SUSE Security Ratings
- SUSE Bug 1199602
- SUSE Bug 1199834
- SUSE CVE CVE-2022-30594 page
Описание
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_161-default-3-2.2
SUSE Linux Enterprise Server for SAP Applications 12 SP3:kgraft-patch-4_4_180-94_161-default-3-2.2
Ссылки
- CVE-2022-30594
- SUSE Bug 1199505
- SUSE Bug 1199602
- SUSE Bug 1201549
- SUSE Bug 1204132