Lucene search

K
suseSuseSUSE-SU-2022:1923-1
HistoryJun 02, 2022 - 12:00 a.m.

Security update for kernel-firmware (important)

2022-06-0200:00:00
lists.opensuse.org
21

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

An update that fixes 17 vulnerabilities is now available.

Description:

This update for kernel-firmware fixes the following issues:

Update to version 20220411 (git commit f219d616f42b, bsc#1199459):

  • CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26350,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312: Update AMD cpu microcode

Update to version 20220309 (git commit cd01f857da28, bsc#1199470):

  • CVE-2021-46744: Ciphertext Side Channels on AMD SEV

Update Intel Bluetooth firmware (INTEL-SA-00604, bsc#1195786):

  • CVE-2021-33139, CVE-2021-33155: Improper conditions check in the
    firmware for some Intel Wireless Bluetooth and Killer Bluetooth products
    may allow an authenticated user to potentially cause denial of service
    via adjacent access.

Special Instructions and Notes:

Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.4:

    zypper in -t patch openSUSE-SLE-15.4-2022-1923=1

  • SUSE Linux Enterprise Module for Basesystem 15-SP4:

    zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-1923=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.4noarch< - openSUSE Leap 15.4 (noarch):- openSUSE Leap 15.4 (noarch):.noarch.rpm
SUSE Linux Enterprise Module for Basesystem 15SP4noarch<  SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch):- SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch):.noarch.rpm

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C