Security update for the Linux Kernel (important)

An update that solves two vulnerabilities and has 6 fixes
is now available.

Description:

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive
various security and bugfixes.

The following security bugs were fixed:

• CVE-2021-22555: A heap out-of-bounds write affecting Linux since
  v2.6.19-rc1 was discovered in net/netfilter/x_tables.c (bnc#1188116 ).
• CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer
  that allows to obtain full root privileges (bsc#1188062).

The following non-security bugs were fixed:

• ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
• cgroup1: do not allow ‘\n’ in renaming (bsc#1187972).
• qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
• scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
• usb: dwc3: Fix debugfs creation flow (git-fixes).
• x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
• x86/process: Check PF_KTHREAD and not current->mm for kernel threads
  (bsc#1152489).

Special Instructions and Notes:

Please reboot the system after installing this update.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2021-2409=1