Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP7)

In the Linux kernel, the following vulnerability has been resolved: ice: Fix PTP NULL pointer dereference during VSI rebuild Fix race condition where PTP periodic work runs while VSI is being rebuilt, accessing NULL vsi->rx_rings. The sequence was: 1. ice_ptp_prepare_for_reset() cancels PTP work 2. ice_ptp_rebuild() immediately queues PTP work 3. VSI rebuild happens AFTER ice_ptp_rebuild() 4. PTP work runs and accesses NULL vsi->rx_rings Fix: Keep PTP work cancelled during rebuild, only queue it after VSI rebuild completes in ice_rebuild(). Added ice_ptp_queue_work() helper function to encapsulate the logic for queuing PTP work, ensuring it's only queued when PTP is supported and the state is ICE_PTP_READY. Error log: [ 121.392544] ice 0000:60:00.1: PTP reset successful [ 121.392692] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 121.392712] #PF: supervisor read access in kernel mode [ 121.392720] #PF: error_code(0x0000) - not-present page [ 121.392727]...

Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_tables_addchain() publishes the chain to table->chains via list_add_tail_rcu() (in nft_chain_add()) before registering hooks. If nf_tables_register_hook() then fails, the error path calls nft_chain_del() (list_del_rcu()) followed by nf_tables_chain_destroy() with no RCU grace period in between. This creates two use-after-free conditions: 1) Control-plane: nf_tables_dump_chains() traverses table->chains under rcu_read_lock(). A concurrent dump can still be walking the chain when the error path frees it. 2) Packet path: for NFPROTO_INET, nf_register_net_hook() briefly installs the IPv4 hook before IPv6 registration fails. Packets entering nft_do_chain() via the transient IPv4 hook can still be dereferencing chain->blob_gen_X when the error path frees the chain. Add synchronize_rcu() between nft_chain_del() and the chai...

Уязвимость компонента net/netfilter/nf_tables_api.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)