SUSE-SU-2022:3727-1

Опубликовано: 25 окт. 2022

Источник: suse-cvrf

Описание

Security update for xen

This update for xen fixes the following issues:

Updated to version 4.16.2 (bsc#1027519):

CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806).
CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807).

Bugfixes:

Fixed Xen DomU unable to emulate audio device (bsc#1201994).
Fixed logic error in built-in default of max_event_channels (bsc#1167608, bsc#1201631).

Список пакетов

Image SLES15-SP4

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Azure-Basic

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Azure-Standard

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-BYOS

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-BYOS-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-BYOS-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-BYOS-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-CHOST-BYOS

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-CHOST-BYOS-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-CHOST-BYOS-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-CHOST-BYOS-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-EC2-ECS-HVM

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-HPC

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-HPC-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-HPC-BYOS

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-HPC-BYOS-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-HPC-BYOS-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-HPC-BYOS-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-HPC-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-HPC-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Hardened-BYOS

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Hardened-BYOS-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Hardened-BYOS-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Hardened-BYOS-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Server-4-3

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-3

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-3-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-3-BYOS

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-3-BYOS-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-3-BYOS-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-3-BYOS-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-3-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-3-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-4

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-4-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-4-BYOS

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-4-BYOS-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-4-BYOS-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-4-BYOS-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-4-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Micro-5-4-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-BYOS

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-BYOS-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-BYOS-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-BYOS-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Hardened

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Hardened-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Hardened-BYOS

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Hardened-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAP-Hardened-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAPCAL

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAPCAL-Azure

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAPCAL-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SAPCAL-GCE

xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

SUSE Linux Enterprise Micro 5.3

xen-libs-4.16.2_06-150400.4.11.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

xen-libs-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

SUSE Linux Enterprise Module for Server Applications 15 SP4

xen-4.16.2_06-150400.4.11.1

xen-devel-4.16.2_06-150400.4.11.1

xen-tools-4.16.2_06-150400.4.11.1

xen-tools-xendomains-wait-disk-4.16.2_06-150400.4.11.1

openSUSE Leap 15.4

xen-4.16.2_06-150400.4.11.1

xen-devel-4.16.2_06-150400.4.11.1

xen-doc-html-4.16.2_06-150400.4.11.1

xen-libs-4.16.2_06-150400.4.11.1

xen-libs-32bit-4.16.2_06-150400.4.11.1

xen-tools-4.16.2_06-150400.4.11.1

xen-tools-domU-4.16.2_06-150400.4.11.1

xen-tools-xendomains-wait-disk-4.16.2_06-150400.4.11.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20223727-1/
Link for SUSE-SU-2022:3727-1
https://lists.suse.com/pipermail/sle-security-updates/2022-October/012667.html
E-Mail link for SUSE-SU-2022:3727-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1027519
SUSE Bug 1027519
https://bugzilla.suse.com/1167608
SUSE Bug 1167608
https://bugzilla.suse.com/1201631
SUSE Bug 1201631
https://bugzilla.suse.com/1201994
SUSE Bug 1201994
https://bugzilla.suse.com/1203806
SUSE Bug 1203806
https://bugzilla.suse.com/1203807
SUSE Bug 1203807
https://www.suse.com/security/cve/CVE-2022-33746/
SUSE CVE CVE-2022-33746 page
https://www.suse.com/security/cve/CVE-2022-33748/
SUSE CVE CVE-2022-33748 page

Описание

P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing may take more time than is reasonable without intermediate preemption checks. Such checking for the need to preempt was so far missing.

Затронутые продукты

Image SLES15-SP4-Azure-Basic:xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Azure-Standard:xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-BYOS-Azure:xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-BYOS-EC2:xen-libs-4.16.2_06-150400.4.11.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-33746.html
CVE-2022-33746
https://bugzilla.suse.com/1203806
SUSE Bug 1203806

Описание

lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be acquired nested within one another, but in respectively opposite order. With suitable timing between the involved grant copy operations this may result in the locking up of a CPU.

Затронутые продукты

Image SLES15-SP4-Azure-Basic:xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-Azure-Standard:xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-BYOS-Azure:xen-libs-4.16.2_06-150400.4.11.1

Image SLES15-SP4-BYOS-EC2:xen-libs-4.16.2_06-150400.4.11.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-33748.html
CVE-2022-33748
https://bugzilla.suse.com/1203807
SUSE Bug 1203807