SUSE Linux Kernel Multiple Vulnerabilities
Release Date: 28 Jun 2022
RISK: Medium Risk
TYPE: Operating Systems - Linux
Multiple vulnerabilities were identified in SUSE Linux Kernel. A attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, sensitive information disclosure and security restriction bypass on the targeted system.
Impact
- Elevation of Privilege
- Security Restriction Bypass
- Information Disclosure
- Denial of Service
System / Technologies affected
- openSUSE Leap 15.3
- openSUSE Leap 15.4
- SUSE Linux Enterprise Desktop 15-SP3
- SUSE Linux Enterprise High Availability 15-SP3
- SUSE Linux Enterprise High Performance Computing
- SUSE Linux Enterprise High Performance Computing 15-SP3
- SUSE Linux Enterprise Micro 5.1
- SUSE Linux Enterprise Micro 5.2
- SUSE Linux Enterprise Module for Basesystem 15-SP3
- SUSE Linux Enterprise Module for Development Tools 15-SP3
- SUSE Linux Enterprise Module for Legacy Software 15-SP3
- SUSE Linux Enterprise Module for Live Patching 15-SP3
- SUSE Linux Enterprise Module for Public Cloud 15-SP3
- SUSE Linux Enterprise Module for Realtime 15-SP3
- SUSE Linux Enterprise Real Time 15-SP3
- SUSE Linux Enterprise Server
- SUSE Linux Enterprise Server 15-SP3
- SUSE Linux Enterprise Server for SAP Applications
- SUSE Linux Enterprise Server for SAP Applications 15-SP3
- SUSE Linux Enterprise Workstation Extension 15-SP3
- SUSE Manager Proxy 4.2
- SUSE Manager Retail Branch Server 4.2
- SUSE Manager Server 4.2
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- https://www.suse.com/support/update/announcement/2022/suse-su-20222172-1
- https://www.suse.com/support/update/announcement/2022/suse-su-20222173-1
- https://www.suse.com/support/update/announcement/2022/suse-su-20222177-1
Vulnerability Identifier
- CVE-2019-19377
- CVE-2020-26541
- CVE-2021-33061
- CVE-2022-0168
- CVE-2022-1012
- CVE-2022-1184
- CVE-2022-1652
- CVE-2022-1729
- CVE-2022-1966
- CVE-2022-1972
- CVE-2022-1974
- CVE-2022-1975
- CVE-2022-20008
- CVE-2022-20141
- CVE-2022-21123
- CVE-2022-21125
- CVE-2022-21127
- CVE-2022-21166
- CVE-2022-21180
- CVE-2022-30594
- CVE-2022-32250
Source
Related Link
- https://www.auscert.org.au/bulletins/ESB-2022.3106
- https://www.auscert.org.au/bulletins/ESB-2022.3105
- https://www.auscert.org.au/bulletins/ESB-2022.3104
- https://www.suse.com/support/update/announcement/2022/suse-su-20222172-1
- https://www.suse.com/support/update/announcement/2022/suse-su-20222173-1
- https://www.suse.com/support/update/announcement/2022/suse-su-20222177-1
沒有留言:
發佈留言