Advisory, added to svn:


type: security
subject: Updated kernel packages fix security vulnerabilities
CVE:
 - CVE-2022-2318
 - CVE-2022-26365
 - CVE-2022-33740
 - CVE-2022-33741
 - CVE-2022-33742
 - CVE-2022-33743
 - CVE-2022-33744
 - CVE-2022-34918
src:
  8:
   core:
     - kernel-5.15.55-2.mga8
     - kmod-virtualbox-6.1.34-1.25.mga8
     - kmod-xtables-addons-3.20-1.25.mga8
description: |
  This kernel update is based on upstream 5.15.55 and fixes at least the
  following security issues:

  There are use-after-free vulnerabilities caused by timer handler in
  net/rose/rose_timer.c of linux that allow attackers to crash linux kernel
  without any privileges (CVE-2022-2318).

  Xen Block and Network PV device frontends don't zero memory regions before
  sharing them with the backend (CVE-2022-26365, CVE-2022-33740, XSA-403).
  Additionally the granularity of the grant table doesn't allow sharing less
  than a 4K page, leading to unrelated data residing in the same 4K page as
  data shared with a backend being accessible by such backend (CVE-2022-33741,
  CVE-2022-33742, XSA-403).

  Xen network backend may cause Linux netfront to use freed SKBs While adding
  logic to support XDP (eXpress Data Path), a code label was moved in a way
  allowing for SKBs having references (pointers) retained for further
  processing to nevertheless be freed (CVE-2022-33743, XSA-405).

  Xen Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests
  on Arm, dom0 is using an rbtree to keep track of the foreign mappings.
  Updating of that rbtree is not always done completely with the related lock
  held, resulting in a small race window, which can be used by unprivileged
  guests via PV devices to cause inconsistencies of the rbtree. These
  in consistencies can lead to Denial of Service (DoS) of dom0, e.g. by
  causing crashes or the inability to perform further mappings of other guests
  memory pages (CVE-2022-33744, XSA-406).

  An issue was discovered in the Linux kernel through 5.18.9. A type confusion
  bug in nft_set_elem_init (leading to a buffer overflow) could be used by a
  local attacker to escalate privileges (The attacker can obtain root access,
  but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN
  access) (CVE-2022-34918).

  Other fixes in this update:
  - ALSA: hda: Add fixup for Dell Latitidue E5430
  - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model
  - ALSA: hda/realtek: Enable the headset-mic on a Xiaomi laptop
  - ALSA: hda/realtek: Fix headset mic for Acer SF313-51
  - ALSA: hda/realtek: Fix headset mic problem for a HP machine with alc221
  - ALSA: hda/realtek: Fix headset mic problem for a HP machine with alc671
  - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 440/450 G9 and
    EliteBook 640/650 G9
  - ARM: 9213/1: Print message about disabled Spectre workarounds only once
  - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale
    pointer (fixes crash)
  - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
    (fixes crash)
  - xfs: only run COW extent recovery when there are no live extents
  - xfs: don't include bnobt blocks when reserving free block pool
  - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks
  - xfs: drop async cache flushes from CIL commits

  For other upstream fixes, see the referenced changelogs.
references:
 - https://bugs.mageia.org/show_bug.cgi?id=30642
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.51
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.52
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.53
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.54
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.55
 - https://xenbits.xen.org/xsa/advisory-403.html
 - https://xenbits.xen.org/xsa/advisory-405.html
 - https://xenbits.xen.org/xsa/advisory-406.html

Keywords: (none) => advisory

MGA8-64 Plasma on Acer Aspire 5253
No installation issues
No problems on wifi, internet access, sound, access to NFS-share, different file types.

CC: (none) => herman.viaene

No regressions noticed. x86_64 on host and vb guest, also aarch64 on rpi 4b.

CC: (none) => davidwhodgins

mga8, x64
Updated the desktop and server kernels, without the source packages.

Mobo: MSI model: Z97-G43
Quad Core Intel Core i7-4790
NVIDIA GM204 [GeForce GTX 970]
Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet - driver: r8169 

Everything running as it should with the server kernel.  After an hour switched to the desktop kernel.  No problems there either.

CC: (none) => tarazed25

MGA8-64, Gnome, Asus Laptop

AMD A6-9225 RADEON R4
RTL8723BE 
Bluetooth

The following 5 packages are going to be installed:

- cpupower-5.15.55-2.mga8.x86_64
- kernel-desktop-5.15.55-2.mga8-1-1.mga8.x86_64
- kernel-desktop-latest-5.15.55-2.mga8.x86_64
- kernel-userspace-headers-5.15.55-2.mga8.x86_64
- lib64bpf0-5.15.55-2.mga8.x86_64

76MB of additional disk space will be used.usual install plus glibc

---- restarted


$ uname -a
Linux localhost.localdomain 5.15.55-desktop-2.mga8 #1 SMP Fri Jul 15 20:28:24 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

wifi works
text editor works
libreoffice works
sound works
firefox works
suspend works

CC: (none) => brtians1

mga8-64 OK here; 

Let rpmdrake install:
- cpupower-5.15.55-2.mga8.x86_64
- kernel-userspace-headers-5.15.55-2.mga8.x86_64
- lib64bpf0-5.15.55-2.mga8.x86_64
Due to the drakrpm backport bug, used urpmi for the rest:
$ sudo urpmi kernel-desktop-5.15.55-2.mga8 kernel-desktop-devel-5.15.55-2.mga8 virtualbox-kernel-5.15.55-desktop-2.mga8
also pulls in the three "-latest"


Hardware:  My workstation "svarten": Mainboard: Sabertooth P67, CPU: i7-3770, RAM 16G, GM107 [GeForce GTX 750] using nvidia-current; GeForce 635 series and later, 4k display.  Disk&Filesystem: SSD with /boot/EFI and ext4 /boot, LUKS{LVM {swap, ext4 /home & / } and a spinner at /mnt/spinner

$ uname -a
Linux svarten.tribun 5.15.55-desktop-2.mga8 #1 SMP Fri Jul 15 20:28:24 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

$ dkms status
virtualbox, 6.1.34-1.8.mga8, 5.15.55-desktop-2.mga8, x86_64: installed 
virtualbox, 6.1.34-1.8.mga8, 5.15.50-desktop-1.mga8, x86_64: installed 
nvidia-current, 470.129.06-1.mga8.nonfree, 5.15.55-desktop-2.mga8, x86_64: installed 
nvidia-current, 470.129.06-1.mga8.nonfree, 5.15.50-desktop-1.mga8, x86_64: installed 
virtualbox, 6.1.34-1.8.mga8, 5.15.55-desktop-2.mga8, x86_64: installed-binary from 5.15.55-desktop-2.mga8
virtualbox, 6.1.34-1.10.mga8, 5.15.50-desktop-1.mga8, x86_64: installed-binary from 5.15.50-desktop-1.mga8


BOINC detects CUDA and OpenCL. No such workunit to try.

Tested:  Plasma desktop; using Thunderbird, LibreOffice, Ktorrent, Nextcloud client, Syncthing, flatpak Firefox (video slow as usual), Firefox ESR (video ok) java program FriBOK, ... 

Tests OK as VirtualBox Host:

Guest 1: my usual MSW7pro-64, tests OK: dynamic guest window resizing, bidirectional clipboard, host shared folders write protected and not, USB2  memory stick read&write (using upstream extension pack), video playing well in Firefox when restricting BOINC to only use 6 of 8 cores.

Guest 2: OK: BOINC LHC@home ATLAS simulation virtual machine 5CPU.

CC: (none) => fri

AMD x3-450, Nvidia 730GT (390), Xfce


The following 9 packages are going to be installed:

- cpupower-5.15.55-2.mga8.x86_64
- kernel-desktop-5.15.55-2.mga8-1-1.mga8.x86_64
- kernel-desktop-devel-5.15.55-2.mga8-1-1.mga8.x86_64
- kernel-desktop-devel-latest-5.15.55-2.mga8.x86_64
- kernel-desktop-latest-5.15.55-2.mga8.x86_64
- kernel-userspace-headers-5.15.55-2.mga8.x86_64
- lib64bpf0-5.15.55-2.mga8.x86_64
- virtualbox-kernel-5.15.55-desktop-2.mga8-6.1.34-1.25.mga8.x86_64
- virtualbox-kernel-desktop-latest-6.1.34-1.25.mga8.x86_64

-- rebooted

$ uname -a
Linux localhost.localdomain 5.15.55-desktop-2.mga8 #1 SMP Fri Jul 15 20:28:24 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

# lsmod | grep nvidia
nvidia_uvm            933888  0
nvidia_drm             53248  1
drm_kms_helper        307200  1 nvidia_drm
nvidia_modeset       1060864  5 nvidia_drm
nvidia              15888384  178 nvidia_uvm,nvidia_modeset
ipmi_msghandler        69632  2 ipmi_devintf,nvidia
drm                   630784  4 drm_kms_helper,nvidia_drm


- nvidia driver working
- various products working
- virtualbox working with mageia 8 32 bit (mate) instance
- sound works

ASUS Laptop - xfce
N4000 - celeron
UHD Graphics 600 (integrated)
Gemini Lake Wifi


The following 5 packages are going to be installed:

- cpupower-5.15.55-2.mga8.x86_64
- kernel-desktop-5.15.55-2.mga8-1-1.mga8.x86_64
- kernel-desktop-latest-5.15.55-2.mga8.x86_64
- kernel-userspace-headers-5.15.55-2.mga8.x86_64
- lib64bpf0-5.15.55-2.mga8.x86_64


-- rebooted

$ uname -a
Linux localhost 5.15.55-desktop-2.mga8 #1 SMP Fri Jul 15 20:28:24 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux


- wifi works
- firefox works
- sound/video are good
- Luks encryption working on drive
- suspend works

Foolishness, my Dell Inspiron 5100, P4, 32-bit Xfce system, using kernel-desktop.

No installation issues, and everything is working here.

CC: (none) => andrewsfarm

In my testing of Vbox clients and real hardware I only see in update_testing:

kernel-desktop-latest-5.15.54-1.mga8.i586
kernel-desktop-latest-5.15.54-1.mga8.x86_64

All testing looks ok

Why is the bug labeled: Update request: kernel-5.15.55-2.mga8

CC: (none) => wilcal.int

We are really using .55 here...
Which mirror are you using?
It seem to be off.
Or have you forgot to update media files?

Hey Bill - I found 5.15.55-22.  You may want to check your mirror.

(In reply to Morgan Leijström from comment #11)
> We are really using .55 here...
> Which mirror are you using?
> It seem to be off.
> Or have you forgot to update media files?

rsync://mirrors.kernel.org/mirrors/mageia/distrib/8/x86_64/

(In reply to Brian Rockwell from comment #12)
> Hey Bill - I found 5.15.55-22.  You may want to check your mirror.

rsync://mirrors.kernel.org/mirrors/mageia/distrib/8/x86_64/

I rsync'd just before checking today so that seems to be what's in:

mirrors.kernel.org/mirrors/mageia/distrib/8/x86_64/

it's there:
http://mirrors.kernel.org/mageia/distrib/8/x86_64/media/core/updates_testing/

Kernel: 5.15.55-desktop-2.mga8 x86_64
Quad Core Intel Celeron J4125
Intel GeminiLake [UHD Graphics 600] driver: i915
Intel Gemini Lake PCH CNVi WiFi driver: iwlwifi

Installed desktop and server kernels.
Everything working so far.
Solved the earlier problem of vlc gui not working - it was a mixture of tainted and untainted packages.  Had to remove all and install only tainted.

MGA8-32bit, Nouveau (304)

used as a nextcloud test server

The following 5 packages are going to be installed:

- cpupower-5.15.55-2.mga8.i586
- kernel-server-5.15.55-2.mga8-1-1.mga8.i586
- kernel-server-latest-5.15.55-2.mga8.i586
- kernel-userspace-headers-5.15.55-2.mga8.i586
- libbpf0-5.15.55-2.mga8.i586

-- rebooted

$ uname -a
Linux localhost.localdomain 5.15.55-server-2.mga8 #1 SMP Sat Jul 16 00:57:17 UTC 2022 i686 i686 i386 GNU/Linux

- nouveau graphics working as expected
- nextcloud server working, include apache and DBMS
- libreoffice working

Plasma x86_64, desktop PC.
Installation via QArepo and urpmi --auto-update; no issues.

TESTS
=====
```
browser: ok
tunderbird: ok
nextcloud-client: ok
sound: ok
webcam: ok
virtualbox: ok
solaar (logitech mouse and keyboard): ok
Bluetooth: ok
boinc with openCL detection: ok
mock: ok
signal-desktop (Mageia package): ok
schildichat matrix client (Mageia package): ok
psensor / sensors-detect: ok  (GPU fan speed still off, no improvement)
libreoffice with openCL: ok
```

SYSTEM CONFIGURATION
====================
```
$ inxi -b
System:    Host: cbct-desk Kernel: 5.15.55-desktop-2.mga8 x86_64 bits: 64 
           Desktop: KDE Plasma 5.20.4 Distro: Mageia 8 mga8 
Machine:   Type: Desktop System: ASUS product: N/A v: N/A serial: <superuser required> 
           Mobo: ASUSTeK model: TUF GAMING B550M-PLUS v: Rev X.0x 
           serial: <superuser required> UEFI: American Megatrends v: 2423 date: 08/10/2021 
CPU:       Info: 12-Core AMD Ryzen 9 5900X [MT MCP] speed: 4041 MHz min/max: 2200/3700 MHz 
Graphics:  Device-1: AMD Ellesmere [Radeon RX 470/480/570/570X/580/580X/590] driver: amdgpu 
           v: kernel 
           Display: x11 server: Mageia X.org 1.20.14 driver: amdgpu,v4l 
           resolution: 2560x1440~60Hz 
           OpenGL: renderer: AMD Radeon RX 570 Series (POLARIS10 DRM 3.42.0 
           5.15.55-desktop-2.mga8 LLVM 11.0.1) 
           v: 4.6 Mesa 21.3.8 
Network:   Device-1: Realtek RTL8125 2.5GbE driver: r8169 
Drives:    Local Storage: total: 2.05 TiB used: 676.62 GiB (32.3%) 
Info:      Processes: 521 Uptime: 4m Memory: 31.27 GiB used: 3.37 GiB (10.8%) Shell: Bash 
           inxi: 3.2.01 
```

CC: (none) => chb0

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2022-0263.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED