FEDORA-2022-1a5b125ac6 — security update for kernel

stable

kernel-5.19.15-301.fc37

FEDORA-2022-1a5b125ac6 created by jforbes 3 years ago for Fedora 37

The 101/201/301 builds of the 5.19.15 kernel contain fixes for some wireless network vulnerabilities and a couple of important arm bug fixes.

The 5.19.15 stable kernel update contains a number of important fixes across the tree.

The 5.19.14 stable kernel update contains a number of important fixes across the tree.

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-1a5b125ac6

This update has been submitted for testing by jforbes.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update has obsoleted kernel-5.19.15-300.fc37, and has inherited its bugs and notes.

3 years ago

tiberias commented & provided feedback 3 years ago

karma

Default & performance tests pass (KVM)

Test Case kernel regression

This update's test gating status has been changed to 'failed'.

3 years ago

This update's test gating status has been changed to 'passed'.

3 years ago

nivag commented & provided feedback 3 years ago

karma

Works for me: all using the Mate Desktop Environment.

sirius: desktop 16GB Intel i7-3770 CPU desktop (SSD + 5 hard drives in RAID-6) real:10m42.336s user:4m37.228s sys:4m53.738s

sedna: laptop 8GB Intel i5-2520M CPU Lenovo T420 (SSD only) real:110m59.096s user:75m14.812s sys:33m53.152s ////////// took way to long compared to what it has done in the past!

mercury: laptop 32GB AMD Ryzen 7 5700U with Radeon 5500 Graphics (SSD only) rea1:19m37.913s user:9m26.604s sys:7m29.895s

*** I’m intensely curious as to the reason for why sedna seems to randomly fluctuate between short (normally under 11 minutes) & extremely long (100+ minutes) elapsed times for the performance test!

Test Case kernel regression

nixuser commented & provided feedback 3 years ago

karma

Working fine here, regression tests passing.

Dell Precision T5610 2 x Intel(R) Xeon(R) CPU E5-2603 v2 @ 1.80GHz (8 cores total) NVIDIA Corporation GK104 [GeForce GTX 760] (rev a1)

Test Case kernel regression

This update has been submitted for stable by bodhi.

3 years ago

This update has obsoleted kernel-5.19.14-300.fc37, and has inherited its bugs and notes.

3 years ago

pbrobinson edited this update.

3 years ago

t3rm1n4l provided feedback 3 years ago

karma

Test Case kernel regression

pbrobinson commented & provided feedback 3 years ago

karma

Tested 3 rockchip devices and all look good, tested a whole raft of various raspberry pis, and a bunch of other random x86 and aarch64 devices. Wifi works on all the models with WiFi too.

BZ#2128462 CVE-2022-40768 kernel: leak of sensitive information due to uninitialized data in stex_queuecommand_lck() in drivers/scsi/stex.c

BZ#2128463 CVE-2022-40768 kernel: leak of sensitive information due to uninitialized data in stex_queuecommand_lck() in drivers/scsi/stex.c [fedora-all]

BZ#2133490 CVE-2022-3435 kernel: an out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c

BZ#2133491 CVE-2022-3435 kernel: an out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c [fedora-all]

BZ#2134177 kernel crash on a number of rockchip rk3399 devices on boot

Test Case kernel regression

This update's test gating status has been changed to 'failed'.

3 years ago

This update's test gating status has been changed to 'passed'.

3 years ago

imabug provided feedback 3 years ago

karma

Test Case kernel regression

jforbes edited this update.

3 years ago

bretth commented & provided feedback 3 years ago

karma

Default & performance tests pass (KVM)

Test Case kernel regression

This update's test gating status has been changed to 'failed'.

3 years ago

geraldosimiao commented & provided feedback 3 years ago

karma

working fine on KVM + Qemu + Virt-manager (UEFI firmware)

Test Case kernel regression

This update's test gating status has been changed to 'passed'.

3 years ago

g6avk commented & provided feedback 3 years ago

karma

Works for me.. It's been up for a couple of hours now with no issues noticed. The tests pass OK.

Test Case kernel regression

pwhalen commented & provided feedback 3 years ago

karma

Tested on the Firefly2

BZ#2134177 kernel crash on a number of rockchip rk3399 devices on boot

py0xc3 commented & provided feedback 3 years ago

karma

./runtests.sh PASS on 5.19.15-301.fc37.x86_64 on virtual machine in KVM/QEMU (Host Intel Core i7-4720HQ, NVIDIA GM204M [GeForce GTX 970M] driver: nouveau). VM installed using Fedora-KDE-Live-x86_64-37-20221014.n.0.iso (updated as of today). No modifications beyond dnf update.

cat /proc/sys/kernel/tainted 
8192

It boots properly & I experience no issues so far.

./runtests.sh -t performance not yet tested.

Test Case kernel regression

atim provided feedback 3 years ago

Test Case kernel regression

atim provided feedback 3 years ago

karma

This update has been pushed to stable.

3 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

3 years ago

in stable

3 years ago

modified

3 years ago

Builds

kernel-5.19.15-301.fc37

BZ#2128462 CVE-2022-40768 kernel: leak of sensitive information due to uninitialized data in stex_queuecommand_lck() in drivers/scsi/stex.c

BZ#2128463 CVE-2022-40768 kernel: leak of sensitive information due to uninitialized data in stex_queuecommand_lck() in drivers/scsi/stex.c [fedora-all]

BZ#2133490 CVE-2022-3435 kernel: an out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c

BZ#2133491 CVE-2022-3435 kernel: an out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c [fedora-all]

BZ#2134177 kernel crash on a number of rockchip rk3399 devices on boot

BZ#2134377 CVE-2022-41674 kernel: u8 overflow problem in cfg80211_update_notlisted_nontrans()

BZ#2134440 CVE-2022-42719 kernel: A use-after-free problem observed in multi-BSSID element when parsing

BZ#2134451 CVE-2022-42720 kernel: A use-after-free problem was observed in bss_ref_get in net/wireless/scan.c

BZ#2134465 CVE-2022-41674 kernel: u8 overflow problem in cfg80211_update_notlisted_nontrans() [fedora-all]

BZ#2134469 CVE-2022-42719 kernel: A use-after-free problem observed in multi-BSSID element when parsing [fedora-all]

BZ#2134470 CVE-2022-42720 kernel: A use-after-free problem was observed in bss_ref_get in net/wireless/scan.c [fedora-all]

BZ#2134506 CVE-2022-42721 kernel: BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c

BZ#2134507 CVE-2022-42721 kernel: BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c [fedora-all]

BZ#2134517 CVE-2022-42722 Kernel: Denial of service in beacon protection for P2P-device

BZ#2134579 CVE-2022-42722 kernel: Denial of service in beacon protection for P2P-device [fedora-all]

kernel-5.19.15-301.fc37

Automated Test Results

passed

Test Cases


0	10	Test Case kernel regression